Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.8Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1.Apr 7, 2026
- Critical9.8Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1.Apr 7, 2026
- High8.8Incorrect boundary conditions in the Graphics: WebGPU component.Apr 7, 2026
- High8.8Incorrect boundary conditions, integer overflow in the Graphics: Text component.Apr 7, 2026
- Critical9.8Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1.Apr 7, 2026
- Critical9.6Hackage CSRF vulnerabilityMar 28, 2026
- High7.4A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer.Mar 24, 2026
- Medium6.5Spoofing issue in Thunderbird.Mar 24, 2026
- Critical9.8Memory safety bugs present in Firefox 148 and Thunderbird 148.Mar 24, 2026
- Medium6.5Spoofing issue in the Privacy: Anti-Tracking component.Mar 24, 2026
- High7.5Denial-of-service in the Libraries component in NSS.Mar 24, 2026
- High7.5Denial-of-service in the XML component.Mar 24, 2026
- Critical10.0Sandbox escape due to use-after-free in the Graphics: Canvas2D component.Mar 24, 2026
- Critical9.1Undefined behavior in the Audio/Video component.Mar 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine component.Mar 24, 2026
- High8.8Privilege escalation in the IPC component.Mar 24, 2026
- Critical9.8Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148.Mar 24, 2026
- Critical9.8Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148.Mar 24, 2026
- High7.5Incorrect boundary conditions in the Graphics: Text component.Mar 24, 2026
- High8.1Undefined behavior in the WebRTC: Signaling component.Mar 24, 2026
- Critical9.8Privilege escalation in the Netmonitor component.Mar 24, 2026
- Critical9.1Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component.Mar 24, 2026
- Critical9.1Uninitialized memory in the Graphics: Canvas2D component.Mar 24, 2026
- High7.5Incorrect boundary conditions in the Audio/Video component.Mar 24, 2026
- High7.5Incorrect boundary conditions in the Graphics component.Mar 24, 2026