Skip to content
Threat Feed
Subscribe

Product

Firefox ESR

7 briefs RSS
high threat

Multiple Vulnerabilities in Mozilla Firefox and Thunderbird

Multiple vulnerabilities in Mozilla Firefox, Firefox ESR, and Thunderbird could allow a remote attacker to execute arbitrary code, disclose information, bypass security restrictions, deceive the user, escalate privileges, or cause a denial-of-service condition.

Firefox +2 vulnerability thunderbird code-execution information-disclosure privilege-escalation denial-of-service
2r 5t
high advisory

Multiple Vulnerabilities in Mozilla Firefox and Thunderbird

Multiple vulnerabilities exist in Mozilla Firefox, Firefox ESR, and Thunderbird that could allow a remote attacker to execute arbitrary code, disclose sensitive information, bypass security measures, or conduct cross-site scripting or spoofing attacks.

Firefox +2 vulnerability thunderbird xss spoofing
2r 2t
medium advisory

Mozilla Firefox Multiple Vulnerabilities

Mozilla released security updates to address vulnerabilities in Firefox and Firefox ESR versions, potentially allowing for exploitation if left unpatched.

Firefox +1 vulnerability browser mozilla
2r 2t
medium advisory

Mozilla Firefox Multiple Vulnerabilities

Mozilla released a security advisory addressing vulnerabilities in Firefox and Firefox ESR versions prior to 150.0.1, 140.10.1, and 115.35.1, potentially leading to arbitrary code execution or information disclosure.

Firefox +1 vulnerability mozilla
2r 3t
high advisory

Mozilla Firefox Audio/Video Boundary Condition Vulnerability (CVE-2026-4714)

CVE-2026-4714 is a high-severity vulnerability affecting Firefox, Firefox ESR, and Thunderbird due to incorrect boundary conditions in the Audio/Video component, potentially leading to denial-of-service.

Firefox +2 cve-2026-4714 thunderbird denial-of-service
2r 3t
high advisory

Mozilla Products Graphics Component Boundary Condition Vulnerability (CVE-2026-4713)

CVE-2026-4713 is a high-severity vulnerability due to incorrect boundary conditions in the Graphics component of Mozilla Firefox, Firefox ESR, and Thunderbird, potentially leading to denial of service.

Firefox +2 cve-2026-4713 mozilla thunderbird denial-of-service graphics
2r 1t
critical advisory

Use-After-Free Vulnerability in Firefox, ESR, and Thunderbird CSS Parsing (CVE-2026-4691)

A use-after-free vulnerability (CVE-2026-4691) in the CSS Parsing and Computation component affects Firefox versions prior to 149, Firefox ESR versions prior to 115.34 and 140.9, and Thunderbird versions prior to 149 and 140.9, potentially leading to arbitrary code execution.

Firefox +2 cve-2026-4691 use-after-free thunderbird
2r 3t