Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.8Integer overflow in the Audio/Video component.Feb 24, 2026
- Critical9.8Incorrect boundary conditions in the Web Audio component.Feb 24, 2026
- Critical9.8Use-after-free in the Audio/Video: Playback component.Feb 24, 2026
- Critical9.8Undefined behavior in the DOM: Core & HTML component.Feb 24, 2026
- Critical9.8Use-after-free in the DOM: Bindings (WebIDL) component.Feb 24, 2026
- High8.8Use-after-free in the Storage: IndexedDB component.Feb 24, 2026
- Critical10.0Sandbox escape in the Storage: IndexedDB component.Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript: WebAssembly component.Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine: JIT component.Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine component.Feb 24, 2026
- Critical9.8JIT miscompilation, use-after-free in the JavaScript Engine: JIT component.Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine component.Feb 24, 2026
- Critical9.8Integer overflow in the JavaScript: Standard Library component.Feb 24, 2026
- Critical10.0Sandbox escape in the Graphics: WebRender component.Feb 24, 2026
- Critical10.0Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.Feb 24, 2026
- Critical9.8Incorrect boundary conditions in the Graphics: ImageLib component.Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript: GC component.Feb 24, 2026
- Critical9.8Incorrect boundary conditions in the WebRTC: Audio/Video component.Feb 24, 2026
- Critical9.8Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled page…Feb 24, 2026
- UnknownFirefox Incorrect Handle Sandbox EscapeKEVJan 20, 2026
- Critical9.4Ray-Project Ray Code Injection VulnerabilityKEVEPSS 62.5%Nov 26, 2025
- Critical9.8An integer overflow was present in used by the JavaScript engine.EPSS 74.0%Jun 11, 2025
- Critical9.8Certain canvas operations could have lead to memory corruption.EPSS 66.0%Jun 11, 2025
- High7.3Memory safety bugs present in Firefox 138 and Thunderbird 138.EPSS 33.0%May 27, 2025
- Medium6.5Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks.EPSS 31.0%May 27, 2025