Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5Incorrect boundary conditions in the Graphics: Canvas2D component.Mar 24, 2026
- High7.5Incorrect boundary conditions in the Graphics: Canvas2D component.Mar 24, 2026
- High7.5Race condition, use-after-free in the Graphics: WebRender component.Mar 24, 2026
- High8.8Memory safety bugs present in Firefox 148.0.2.Mar 10, 2026
- Medium6.5Same-origin policy bypass in the CSS Parsing and Computation component.Mar 10, 2026
- High8.8Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android.Mar 10, 2026
- Medium4.3Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _self navigation to an invalid port and triggering…EPSS 0.3%Mar 9, 2026
- Critical9.8Memory safety bugs present in Firefox 147 and Thunderbird 147.Feb 24, 2026
- Critical9.1Uninitialized memory in the Graphics: Text component.Feb 24, 2026
- Critical9.8Invalid pointer in the DOM: Core & HTML component.Feb 24, 2026
- Medium5.4Use-after-free in the JavaScript: WebAssembly component.Feb 24, 2026
- High7.5Information disclosure, mitigation bypass in the Settings UI component.Feb 24, 2026
- Medium4.2Race condition in the JavaScript: GC component.Feb 24, 2026
- High7.5Incorrect boundary conditions in the JavaScript: WebAssembly component.Feb 24, 2026
- Critical9.8Spoofing issue in the WebAuthn component in Firefox for Android.Feb 24, 2026
- Critical9.8Use-after-free in the DOM: Core & HTML component.Feb 24, 2026
- High8.8Use-after-free in the DOM: Core & HTML component.Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript: GC component.Feb 24, 2026
- Critical9.8JIT miscompilation in the JavaScript: WebAssembly component.Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript: GC component.Feb 24, 2026
- High7.5Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android.Feb 24, 2026
- Critical9.8Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147.Feb 24, 2026
- Critical9.8Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147.Feb 24, 2026
- Critical9.8Mitigation bypass in the Networking: Cache component.Feb 24, 2026
- Critical9.8Same-origin policy bypass in the Networking: JAR component.Feb 24, 2026