{ "fix": "Mozilla Firefox 150.0.2", "url": "https://patchblox.com/security/fix/macos/org.mozilla.firefox-150.0.2", "summary": "Mozilla Firefox 150.0.2, released May 6, 2026, fixes 246 CVEs in Mozilla Firefox. None of them is reported as exploited. Patch Radar priority: Urgent. The latest Mozilla Firefox is 159.0.1, which also fixes every one of these CVEs.", "platform": "macos", "type": "app-version", "title": "Mozilla Firefox 150.0.2", "released": "2026-05-06T11:21:53Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-2796, rated Critical", "supported": true, "cveCount": 246, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.03883, "maxCvss": 10, "appliesTo": [ { "product": "Mozilla Firefox", "productUrl": "https://patchblox.com/security/product/macos/mozilla-firefox", "fixedVersion": "150.0.2", "latestVersion": "159.0.1", "supported": true } ], "supersededBy": { "product": "Mozilla Firefox", "latestVersion": "159.0.1", "productUrl": "https://patchblox.com/security/product/macos/mozilla-firefox" }, "cves": [ { "cveId": "CVE-2026-2796", "url": "https://patchblox.com/security/cve/CVE-2026-2796", "title": "JIT miscompilation in the JavaScript: WebAssembly component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00948, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2805", "url": "https://patchblox.com/security/cve/CVE-2026-2805", "title": "Invalid pointer in the DOM: Core \u0026 HTML component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00657, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4723", "url": "https://patchblox.com/security/cve/CVE-2026-4723", "title": "Use-after-free in the JavaScript Engine component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00617, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2799", "url": "https://patchblox.com/security/cve/CVE-2026-2799", "title": "Use-after-free in the DOM: Core \u0026 HTML component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2797", "url": "https://patchblox.com/security/cve/CVE-2026-2797", "title": "Use-after-free in the JavaScript: GC component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00526, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9187", "url": "https://patchblox.com/security/cve/CVE-2025-9187", "title": "Memory safety bugs fixed in Firefox 142 and Thunderbird 142", "priority": "Urgent", "cvss": 9.8, "epss": 0.0052, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4724", "url": "https://patchblox.com/security/cve/CVE-2026-4724", "title": "Undefined behavior in the Audio/Video component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00507, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14326", "url": "https://patchblox.com/security/cve/CVE-2025-14326", "title": "Use-after-free in the Audio/Video: GMP component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00492, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8044", "url": "https://patchblox.com/security/cve/CVE-2025-8044", "title": "Memory safety bugs fixed in Firefox 141 and Thunderbird 141", "priority": "Urgent", "cvss": 9.8, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2806", "url": "https://patchblox.com/security/cve/CVE-2026-2806", "title": "Uninitialized memory in the Graphics: Text component", "priority": "Urgent", "cvss": 9.1, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0892", "url": "https://patchblox.com/security/cve/CVE-2026-0892", "title": "Memory safety bugs fixed in Firefox 147 and Thunderbird 147", "priority": "Urgent", "cvss": 9.8, "epss": 0.00448, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8043", "url": "https://patchblox.com/security/cve/CVE-2025-8043", "title": "Incorrect URL truncation", "priority": "Urgent", "cvss": 9.8, "epss": 0.00434, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13021", "url": "https://patchblox.com/security/cve/CVE-2025-13021", "title": "Incorrect boundary conditions in the Graphics: WebGPU component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00381, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13022", "url": "https://patchblox.com/security/cve/CVE-2025-13022", "title": "Incorrect boundary conditions in the Graphics: WebGPU component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00381, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13023", "url": "https://patchblox.com/security/cve/CVE-2025-13023", "title": "Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00381, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13024", "url": "https://patchblox.com/security/cve/CVE-2025-13024", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00381, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13026", "url": "https://patchblox.com/security/cve/CVE-2025-13026", "title": "Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00381, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2800", "url": "https://patchblox.com/security/cve/CVE-2026-2800", "title": "Spoofing issue in the WebAuthn component in Firefox for Android", "priority": "Urgent", "cvss": 9.8, "epss": 0.00349, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0881", "url": "https://patchblox.com/security/cve/CVE-2026-0881", "title": "Sandbox escape in the Messaging System component", "priority": "Urgent", "cvss": 10, "epss": 0.00348, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4729", "url": "https://patchblox.com/security/cve/CVE-2026-4729", "title": "Memory safety bugs fixed in Firefox 149 and Thunderbird 149", "priority": "Urgent", "cvss": 9.8, "epss": 0.00343, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4725", "url": "https://patchblox.com/security/cve/CVE-2026-4725", "title": "Sandbox escape due to use-after-free in the Graphics: Canvas2D component", "priority": "Urgent", "cvss": 10, "epss": 0.00331, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14860", "url": "https://patchblox.com/security/cve/CVE-2025-14860", "title": "Use-after-free in the Disability Access APIs component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00315, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2795", "url": "https://patchblox.com/security/cve/CVE-2026-2795", "title": "Use-after-free in the JavaScript: GC component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00296, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2807", "url": "https://patchblox.com/security/cve/CVE-2026-2807", "title": "Memory safety bugs fixed in Firefox 148 and Thunderbird 148", "priority": "Urgent", "cvss": 9.8, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6768", "url": "https://patchblox.com/security/cve/CVE-2026-6768", "title": "Mitigation bypass in the Networking: Cookies component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00285, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6760", "url": "https://patchblox.com/security/cve/CVE-2026-6760", "title": "Mitigation bypass in the Networking: Cookies component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00279, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-5735", "url": "https://patchblox.com/security/cve/CVE-2026-5735", "title": "Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2", "priority": "Urgent", "cvss": 9.8, "epss": 0.00267, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6770", "url": "https://patchblox.com/security/cve/CVE-2026-6770", "title": "Other issue in the Storage: IndexedDB component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.03883, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4696", "url": "https://patchblox.com/security/cve/CVE-2026-4696", "title": "Use-after-free in the Layout: Text and Fonts component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00967, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6746", "url": "https://patchblox.com/security/cve/CVE-2026-6746", "title": "Use-after-free in the DOM: Core \u0026 HTML component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00946, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4700", "url": "https://patchblox.com/security/cve/CVE-2026-4700", "title": "Mitigation bypass in the Networking: HTTP component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00918, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2773", "url": "https://patchblox.com/security/cve/CVE-2026-2773", "title": "Incorrect boundary conditions in the Web Audio component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00917, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2774", "url": "https://patchblox.com/security/cve/CVE-2026-2774", "title": "Integer overflow in the Audio/Video component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00852, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2775", "url": "https://patchblox.com/security/cve/CVE-2026-2775", "title": "Mitigation bypass in the DOM: HTML Parser component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00837, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6758", "url": "https://patchblox.com/security/cve/CVE-2026-6758", "title": "Use-after-free in the JavaScript: WebAssembly component", "priority": "High", "cvss": 7.5, "epss": 0.00809, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4690", "url": "https://patchblox.com/security/cve/CVE-2026-4690", "title": "Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component", "priority": "High", "severity": "Important", "cvss": 8.6, "epss": 0.00803, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4694", "url": "https://patchblox.com/security/cve/CVE-2026-4694", "title": "Incorrect boundary conditions, integer overflow in the Graphics component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00803, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4698", "url": "https://patchblox.com/security/cve/CVE-2026-4698", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00785, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10533", "url": "https://patchblox.com/security/cve/CVE-2025-10533", "title": "Integer overflow in the SVG component", "priority": "High", "severity": "Medium", "cvss": 8.8, "epss": 0.00781, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2771", "url": "https://patchblox.com/security/cve/CVE-2026-2771", "title": "Undefined behavior in the DOM: Core \u0026 HTML component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00759, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2763", "url": "https://patchblox.com/security/cve/CVE-2026-2763", "title": "Use-after-free in the JavaScript Engine component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2764", "url": "https://patchblox.com/security/cve/CVE-2026-2764", "title": "JIT miscompilation, use-after-free in the JavaScript Engine: JIT component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2765", "url": "https://patchblox.com/security/cve/CVE-2026-2765", "title": "Use-after-free in the JavaScript Engine component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2766", "url": "https://patchblox.com/security/cve/CVE-2026-2766", "title": "Use-after-free in the JavaScript Engine: JIT component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2770", "url": "https://patchblox.com/security/cve/CVE-2026-2770", "title": "Use-after-free in the DOM: Bindings (WebIDL) component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2772", "url": "https://patchblox.com/security/cve/CVE-2026-2772", "title": "Use-after-free in the Audio/Video: Playback component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4686", "url": "https://patchblox.com/security/cve/CVE-2026-4686", "title": "Incorrect boundary conditions in the Graphics: Canvas2D component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00729, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4685", "url": "https://patchblox.com/security/cve/CVE-2026-4685", "title": "Incorrect boundary conditions in the Graphics: Canvas2D component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4693", "url": "https://patchblox.com/security/cve/CVE-2026-4693", "title": "Incorrect boundary conditions in the Audio/Video: Playback component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4695", "url": "https://patchblox.com/security/cve/CVE-2026-4695", "title": "Incorrect boundary conditions in the Audio/Video: Web Codecs component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4697", "url": "https://patchblox.com/security/cve/CVE-2026-4697", "title": "Incorrect boundary conditions in the Audio/Video: Web Codecs component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4699", "url": "https://patchblox.com/security/cve/CVE-2026-4699", "title": "Incorrect boundary conditions in the Layout: Text and Fonts component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4702", "url": "https://patchblox.com/security/cve/CVE-2026-4702", "title": "JIT miscompilation in the JavaScript Engine component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.007, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2447", "url": "https://patchblox.com/security/cve/CVE-2026-2447", "title": "Heap buffer overflow in libvpx", "priority": "High", "severity": "Medium", "cvss": 8.8, "epss": 0.00699, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4689", "url": "https://patchblox.com/security/cve/CVE-2026-4689", "title": "Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component", "priority": "High", "severity": "Important", "cvss": 10, "epss": 0.00691, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2779", "url": "https://patchblox.com/security/cve/CVE-2026-2779", "title": "Incorrect boundary conditions in the Networking: JAR component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00686, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2769", "url": "https://patchblox.com/security/cve/CVE-2026-2769", "title": "Use-after-free in the Storage: IndexedDB component", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00686, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2788", "url": "https://patchblox.com/security/cve/CVE-2026-2788", "title": "Incorrect boundary conditions in the Audio/Video: GMP component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00677, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4705", "url": "https://patchblox.com/security/cve/CVE-2026-4705", "title": "Undefined behavior in the WebRTC: Signaling component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00656, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4704", "url": "https://patchblox.com/security/cve/CVE-2026-4704", "title": "Denial-of-service in the WebRTC: Signaling component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00651, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9179", "url": "https://patchblox.com/security/cve/CVE-2025-9179", "title": "Sandbox escape due to invalid pointer in the Audio/Video: GMP component", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.0065, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2787", "url": "https://patchblox.com/security/cve/CVE-2026-2787", "title": "Use-after-free in the DOM: Window and Location component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00641, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14321", "url": "https://patchblox.com/security/cve/CVE-2025-14321", "title": "Use-after-free in the WebRTC: Signaling component", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00639, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2762", "url": "https://patchblox.com/security/cve/CVE-2026-2762", "title": "Integer overflow in the JavaScript: Standard Library component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00632, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14324", "url": "https://patchblox.com/security/cve/CVE-2025-14324", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00605, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4707", "url": "https://patchblox.com/security/cve/CVE-2026-4707", "title": "Incorrect boundary conditions in the Graphics: Canvas2D component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.006, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2791", "url": "https://patchblox.com/security/cve/CVE-2026-2791", "title": "Mitigation bypass in the Networking: Cache component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00599, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2757", "url": "https://patchblox.com/security/cve/CVE-2026-2757", "title": "Incorrect boundary conditions in the WebRTC: Audio/Video component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8028", "url": "https://patchblox.com/security/cve/CVE-2025-8028", "title": "Large branch table could lead to truncated instruction", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.0058, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2785", "url": "https://patchblox.com/security/cve/CVE-2026-2785", "title": "Invalid pointer in the JavaScript Engine component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2758", "url": "https://patchblox.com/security/cve/CVE-2026-2758", "title": "Use-after-free in the JavaScript: GC component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00573, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2776", "url": "https://patchblox.com/security/cve/CVE-2026-2776", "title": "Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software", "priority": "High", "severity": "Important", "cvss": 10, "epss": 0.00562, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2778", "url": "https://patchblox.com/security/cve/CVE-2026-2778", "title": "Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component", "priority": "High", "severity": "Important", "cvss": 10, "epss": 0.00562, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4687", "url": "https://patchblox.com/security/cve/CVE-2026-4687", "title": "Sandbox escape due to incorrect boundary conditions in the Telemetry component", "priority": "High", "severity": "Important", "cvss": 8.6, "epss": 0.0056, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4688", "url": "https://patchblox.com/security/cve/CVE-2026-4688", "title": "Sandbox escape due to use-after-free in the Disability Access APIs component", "priority": "High", "severity": "Important", "cvss": 10, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4726", "url": "https://patchblox.com/security/cve/CVE-2026-4726", "title": "Denial-of-service in the XML component", "priority": "High", "cvss": 7.5, "epss": 0.00551, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4727", "url": "https://patchblox.com/security/cve/CVE-2026-4727", "title": "Denial-of-service in the Libraries component in NSS", "priority": "High", "cvss": 7.5, "epss": 0.00551, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0880", "url": "https://patchblox.com/security/cve/CVE-2026-0880", "title": "Sandbox escape due to integer overflow in the Graphics component", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14330", "url": "https://patchblox.com/security/cve/CVE-2025-14330", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00542, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9185", "url": "https://patchblox.com/security/cve/CVE-2025-9185", "title": "Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.0054, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2789", "url": "https://patchblox.com/security/cve/CVE-2026-2789", "title": "Use-after-free in the Graphics: ImageLib component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.0053, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2786", "url": "https://patchblox.com/security/cve/CVE-2026-2786", "title": "Use-after-free in the JavaScript Engine component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6785", "url": "https://patchblox.com/security/cve/CVE-2026-6785", "title": "Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8031", "url": "https://patchblox.com/security/cve/CVE-2025-8031", "title": "Incorrect URL stripping in CSP reports", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00511, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11708", "url": "https://patchblox.com/security/cve/CVE-2025-11708", "title": "Use-after-free in MediaTrackGraphImpl::GetInstance()", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00509, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4692", "url": "https://patchblox.com/security/cve/CVE-2026-4692", "title": "Sandbox escape in the Responsive Design Mode component", "priority": "High", "severity": "Important", "cvss": 10, "epss": 0.00506, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4691", "url": "https://patchblox.com/security/cve/CVE-2026-4691", "title": "Use-after-free in the CSS Parsing and Computation component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0879", "url": "https://patchblox.com/security/cve/CVE-2026-0879", "title": "Sandbox escape due to incorrect boundary conditions in the Graphics component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6786", "url": "https://patchblox.com/security/cve/CVE-2026-6786", "title": "Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00499, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6757", "url": "https://patchblox.com/security/cve/CVE-2026-6757", "title": "Invalid pointer in the JavaScript: WebAssembly component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00489, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2784", "url": "https://patchblox.com/security/cve/CVE-2026-2784", "title": "Mitigation bypass in the DOM: Security component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00488, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6750", "url": "https://patchblox.com/security/cve/CVE-2026-6750", "title": "Privilege escalation in the Graphics: WebRender component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00483, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4709", "url": "https://patchblox.com/security/cve/CVE-2026-4709", "title": "Incorrect boundary conditions in the Audio/Video: GMP component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00481, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4718", "url": "https://patchblox.com/security/cve/CVE-2026-4718", "title": "Undefined behavior in the WebRTC: Signaling component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00481, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4701", "url": "https://patchblox.com/security/cve/CVE-2026-4701", "title": "Use-after-free in the JavaScript Engine component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00478, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2760", "url": "https://patchblox.com/security/cve/CVE-2026-2760", "title": "Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component", "priority": "High", "severity": "Important", "cvss": 10, "epss": 0.00475, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2761", "url": "https://patchblox.com/security/cve/CVE-2026-2761", "title": "Sandbox escape in the Graphics: WebRender component", "priority": "High", "severity": "Important", "cvss": 10, "epss": 0.00475, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2759", "url": "https://patchblox.com/security/cve/CVE-2026-2759", "title": "Incorrect boundary conditions in the Graphics: ImageLib component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00475, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0891", "url": "https://patchblox.com/security/cve/CVE-2026-0891", "title": "Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00475, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14333", "url": "https://patchblox.com/security/cve/CVE-2025-14333", "title": "Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.00473, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0877", "url": "https://patchblox.com/security/cve/CVE-2026-0877", "title": "Mitigation bypass in the DOM: Security component", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00473, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4706", "url": "https://patchblox.com/security/cve/CVE-2026-4706", "title": "Incorrect boundary conditions in the Graphics: Canvas2D component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.0047, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0878", "url": "https://patchblox.com/security/cve/CVE-2026-0878", "title": "Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "Medium", "cvss": 8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0882", "url": "https://patchblox.com/security/cve/CVE-2026-0882", "title": "Use-after-free in the IPC component", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00465, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0884", "url": "https://patchblox.com/security/cve/CVE-2026-0884", "title": "Use-after-free in the JavaScript Engine component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2767", "url": "https://patchblox.com/security/cve/CVE-2026-2767", "title": "Use-after-free in the JavaScript: WebAssembly component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00462, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8034", "url": "https://patchblox.com/security/cve/CVE-2025-8034", "title": "Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00461, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0889", "url": "https://patchblox.com/security/cve/CVE-2026-0889", "title": "Denial-of-service in the DOM: Service Workers component", "priority": "High", "cvss": 7.5, "epss": 0.00459, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4708", "url": "https://patchblox.com/security/cve/CVE-2026-4708", "title": "Incorrect boundary conditions in the Graphics component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4713", "url": "https://patchblox.com/security/cve/CVE-2026-4713", "title": "Incorrect boundary conditions in the Graphics component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4714", "url": "https://patchblox.com/security/cve/CVE-2026-4714", "title": "Incorrect boundary conditions in the Audio/Video component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4719", "url": "https://patchblox.com/security/cve/CVE-2026-4719", "title": "Incorrect boundary conditions in the Graphics: Text component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4715", "url": "https://patchblox.com/security/cve/CVE-2026-4715", "title": "Uninitialized memory in the Graphics: Canvas2D component", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00447, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8036", "url": "https://patchblox.com/security/cve/CVE-2025-8036", "title": "DNS rebinding circumvents CORS", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.00446, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14323", "url": "https://patchblox.com/security/cve/CVE-2025-14323", "title": "Privilege escalation in the DOM: Notifications component", "priority": "High", "severity": "Medium", "cvss": 8.8, "epss": 0.00445, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4720", "url": "https://patchblox.com/security/cve/CVE-2026-4720", "title": "Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.0044, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4721", "url": "https://patchblox.com/security/cve/CVE-2026-4721", "title": "Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.0044, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2768", "url": "https://patchblox.com/security/cve/CVE-2026-2768", "title": "Sandbox escape in the Storage: IndexedDB component", "priority": "High", "severity": "Important", "cvss": 10, "epss": 0.00439, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2777", "url": "https://patchblox.com/security/cve/CVE-2026-2777", "title": "Privilege escalation in the Messaging System component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00439, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9182", "url": "https://patchblox.com/security/cve/CVE-2025-9182", "title": "Denial-of-service due to out-of-memory in the Graphics: WebRender component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00436, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4717", "url": "https://patchblox.com/security/cve/CVE-2026-4717", "title": "Privilege escalation in the Netmonitor component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00434, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2781", "url": "https://patchblox.com/security/cve/CVE-2026-2781", "title": "Integer overflow in the Libraries component in NSS", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00433, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8027", "url": "https://patchblox.com/security/cve/CVE-2025-8027", "title": "JavaScript engine only wrote partial return value to stack", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8033", "url": "https://patchblox.com/security/cve/CVE-2025-8033", "title": "Incorrect JavaScript state machine for generators", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14328", "url": "https://patchblox.com/security/cve/CVE-2025-14328", "title": "Privilege escalation in the Netmonitor component", "priority": "High", "severity": "Medium", "cvss": 8.8, "epss": 0.00431, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14329", "url": "https://patchblox.com/security/cve/CVE-2025-14329", "title": "Privilege escalation in the Netmonitor component", "priority": "High", "severity": "Medium", "cvss": 8.8, "epss": 0.00431, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4710", "url": "https://patchblox.com/security/cve/CVE-2026-4710", "title": "Incorrect boundary conditions in the Audio/Video component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4716", "url": "https://patchblox.com/security/cve/CVE-2026-4716", "title": "Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00423, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11709", "url": "https://patchblox.com/security/cve/CVE-2025-11709", "title": "Out of bounds read/write in a privileged process triggered by WebGL textures", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00422, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11710", "url": "https://patchblox.com/security/cve/CVE-2025-11710", "title": "Cross-process information leaked due to malicious IPC messages", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00422, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9184", "url": "https://patchblox.com/security/cve/CVE-2025-9184", "title": "Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.0042, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4711", "url": "https://patchblox.com/security/cve/CVE-2026-4711", "title": "Use-after-free in the Widget: Cocoa component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00413, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9181", "url": "https://patchblox.com/security/cve/CVE-2025-9181", "title": "Uninitialized memory in the JavaScript Engine component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00413, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13016", "url": "https://patchblox.com/security/cve/CVE-2025-13016", "title": "Incorrect boundary conditions in the JavaScript: WebAssembly component", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00411, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14327", "url": "https://patchblox.com/security/cve/CVE-2025-14327", "title": "Spoofing issue in the Downloads Panel component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00406, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0885", "url": "https://patchblox.com/security/cve/CVE-2026-0885", "title": "Use-after-free in the JavaScript: GC component", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00404, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6749", "url": "https://patchblox.com/security/cve/CVE-2026-6749", "title": "Information disclosure due to uninitialized memory in the Graphics: Canvas2D component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00403, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8035", "url": "https://patchblox.com/security/cve/CVE-2025-8035", "title": "Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00401, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6747", "url": "https://patchblox.com/security/cve/CVE-2026-6747", "title": "Use-after-free in the WebRTC component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.004, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4712", "url": "https://patchblox.com/security/cve/CVE-2026-4712", "title": "Information disclosure in the Widget: Cocoa component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.004, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6748", "url": "https://patchblox.com/security/cve/CVE-2026-6748", "title": "Uninitialized memory in the Audio/Video: Web Codecs component", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2780", "url": "https://patchblox.com/security/cve/CVE-2026-2780", "title": "Privilege escalation in the Netmonitor component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00395, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6772", "url": "https://patchblox.com/security/cve/CVE-2026-6772", "title": "Incorrect boundary conditions in the Libraries component in NSS", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0039, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6754", "url": "https://patchblox.com/security/cve/CVE-2026-6754", "title": "Use-after-free in the JavaScript Engine component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0886", "url": "https://patchblox.com/security/cve/CVE-2026-0886", "title": "Incorrect boundary conditions in the Graphics component", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00383, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2792", "url": "https://patchblox.com/security/cve/CVE-2026-2792", "title": "Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00377, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2793", "url": "https://patchblox.com/security/cve/CVE-2026-2793", "title": "Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00377, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8029", "url": "https://patchblox.com/security/cve/CVE-2025-8029", "title": "javascript: URLs executed on object and embed tags", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.00376, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8030", "url": "https://patchblox.com/security/cve/CVE-2025-8030", "title": "Potential user-assisted code execution in \u201CCopy as cURL\u201D command", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.00376, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-7323", "url": "https://patchblox.com/security/cve/CVE-2026-7323", "title": "Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8032", "url": "https://patchblox.com/security/cve/CVE-2025-8032", "title": "XSLT documents could bypass CSP", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10528", "url": "https://patchblox.com/security/cve/CVE-2025-10528", "title": "Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8040", "url": "https://patchblox.com/security/cve/CVE-2025-8040", "title": "Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141", "priority": "High", "severity": "Medium", "cvss": 8.8, "epss": 0.00368, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14325", "url": "https://patchblox.com/security/cve/CVE-2025-14325", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00367, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4684", "url": "https://patchblox.com/security/cve/CVE-2026-4684", "title": "Race condition, use-after-free in the Graphics: WebRender component", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00366, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-5732", "url": "https://patchblox.com/security/cve/CVE-2026-5732", "title": "Incorrect boundary conditions, integer overflow in the Graphics: Text component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00364, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6759", "url": "https://patchblox.com/security/cve/CVE-2026-6759", "title": "Use-after-free in the Widget: Cocoa component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00363, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14322", "url": "https://patchblox.com/security/cve/CVE-2025-14322", "title": "Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "Medium", "cvss": 8, "epss": 0.00363, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6784", "url": "https://patchblox.com/security/cve/CVE-2026-6784", "title": "Memory safety bugs fixed in Firefox 150 and Thunderbird 150", "priority": "High", "cvss": 7.5, "epss": 0.00361, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-3847", "url": "https://patchblox.com/security/cve/CVE-2026-3847", "title": "Memory safety bugs fixed in Firefox 148.0.2", "priority": "High", "cvss": 8.8, "epss": 0.00359, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13027", "url": "https://patchblox.com/security/cve/CVE-2025-13027", "title": "Memory safety bugs fixed in Firefox 145 and Thunderbird 145", "priority": "High", "cvss": 8.1, "epss": 0.00356, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0883", "url": "https://patchblox.com/security/cve/CVE-2026-0883", "title": "Information disclosure in the Networking component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10534", "url": "https://patchblox.com/security/cve/CVE-2025-10534", "title": "Spoofing issue in the Site Permissions component", "priority": "High", "cvss": 8.1, "epss": 0.00352, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-5734", "url": "https://patchblox.com/security/cve/CVE-2026-5734", "title": "Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00342, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2783", "url": "https://patchblox.com/security/cve/CVE-2026-2783", "title": "Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00342, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8039", "url": "https://patchblox.com/security/cve/CVE-2025-8039", "title": "Search terms persisted in URL bar", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.0034, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2782", "url": "https://patchblox.com/security/cve/CVE-2026-2782", "title": "Privilege escalation in the Netmonitor component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00339, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10537", "url": "https://patchblox.com/security/cve/CVE-2025-10537", "title": "Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00339, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11714", "url": "https://patchblox.com/security/cve/CVE-2025-11714", "title": "Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00335, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2801", "url": "https://patchblox.com/security/cve/CVE-2026-2801", "title": "Incorrect boundary conditions in the JavaScript: WebAssembly component", "priority": "High", "cvss": 7.5, "epss": 0.00335, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14332", "url": "https://patchblox.com/security/cve/CVE-2025-14332", "title": "Memory safety bugs fixed in Firefox 146 and Thunderbird 146", "priority": "High", "cvss": 7.3, "epss": 0.0033, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11715", "url": "https://patchblox.com/security/cve/CVE-2025-11715", "title": "Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00328, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10532", "url": "https://patchblox.com/security/cve/CVE-2025-10532", "title": "Incorrect boundary conditions in the JavaScript: GC component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00328, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0887", "url": "https://patchblox.com/security/cve/CVE-2026-0887", "title": "Clickjacking issue, information disclosure in the PDF Viewer component", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00326, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4722", "url": "https://patchblox.com/security/cve/CVE-2026-4722", "title": "Privilege escalation in the IPC component", "priority": "High", "cvss": 8.8, "epss": 0.00325, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6773", "url": "https://patchblox.com/security/cve/CVE-2026-6773", "title": "Denial-of-service due to integer overflow in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00324, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-7320", "url": "https://patchblox.com/security/cve/CVE-2026-7320", "title": "Information disclosure due to incorrect boundary conditions in the Audio/Video component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00323, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8093", "url": "https://patchblox.com/security/cve/CVE-2026-8093", "title": "Memory safety bugs fixed in Thunderbird 150.0.2", "priority": "High", "cvss": 8.1, "epss": 0.00323, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10529", "url": "https://patchblox.com/security/cve/CVE-2025-10529", "title": "Same-origin policy bypass in the Layout component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8090", "url": "https://patchblox.com/security/cve/CVE-2026-8090", "title": "Use-after-free in the DOM: Networking component", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13014", "url": "https://patchblox.com/security/cve/CVE-2025-13014", "title": "Use-after-free in the Audio/Video component", "priority": "High", "severity": "Medium", "cvss": 8.8, "epss": 0.00316, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-7322", "url": "https://patchblox.com/security/cve/CVE-2026-7322", "title": "Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00316, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-5733", "url": "https://patchblox.com/security/cve/CVE-2026-5733", "title": "Incorrect boundary conditions in the Graphics: WebGPU component", "priority": "High", "cvss": 8.8, "epss": 0.00315, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10535", "url": "https://patchblox.com/security/cve/CVE-2025-10535", "title": "Information disclosure, mitigation bypass in the Privacy component in Firefox for Android", "priority": "High", "cvss": 7.5, "epss": 0.00312, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6771", "url": "https://patchblox.com/security/cve/CVE-2026-6771", "title": "Mitigation bypass in the DOM: Security component", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00309, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6751", "url": "https://patchblox.com/security/cve/CVE-2026-6751", "title": "Uninitialized memory in the Audio/Video: Web Codecs component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00307, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13020", "url": "https://patchblox.com/security/cve/CVE-2025-13020", "title": "Use-after-free in the WebRTC: Audio/Video component", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00306, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6752", "url": "https://patchblox.com/security/cve/CVE-2026-6752", "title": "Incorrect boundary conditions in the WebRTC component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00306, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6753", "url": "https://patchblox.com/security/cve/CVE-2026-6753", "title": "Incorrect boundary conditions in the WebRTC component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00306, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2794", "url": "https://patchblox.com/security/cve/CVE-2026-2794", "title": "Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android", "priority": "High", "cvss": 7.5, "epss": 0.00304, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0890", "url": "https://patchblox.com/security/cve/CVE-2026-0890", "title": "Spoofing issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.003, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-7324", "url": "https://patchblox.com/security/cve/CVE-2026-7324", "title": "Memory safety bugs fixed in Thunderbird 150.0.1", "priority": "High", "cvss": 7.3, "epss": 0.003, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2798", "url": "https://patchblox.com/security/cve/CVE-2026-2798", "title": "Use-after-free in the DOM: Core \u0026 HTML component", "priority": "High", "cvss": 8.8, "epss": 0.00298, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13025", "url": "https://patchblox.com/security/cve/CVE-2025-13025", "title": "Incorrect boundary conditions in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00296, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6780", "url": "https://patchblox.com/security/cve/CVE-2026-6780", "title": "Denial-of-service in the Audio/Video: Playback component", "priority": "High", "cvss": 7.5, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6781", "url": "https://patchblox.com/security/cve/CVE-2026-6781", "title": "Denial-of-service in the Audio/Video: Playback component", "priority": "High", "cvss": 7.5, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10527", "url": "https://patchblox.com/security/cve/CVE-2025-10527", "title": "Sandbox escape due to use-after-free in the Graphics: Canvas2D component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.0029, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2803", "url": "https://patchblox.com/security/cve/CVE-2026-2803", "title": "Information disclosure, mitigation bypass in the Settings UI component", "priority": "High", "cvss": 7.5, "epss": 0.0029, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11713", "url": "https://patchblox.com/security/cve/CVE-2025-11713", "title": "Potential user-assisted code execution in \u201CCopy as cURL\u201D command", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11152", "url": "https://patchblox.com/security/cve/CVE-2025-11152", "title": "Sandbox escape due to integer overflow in the Graphics: Canvas2D component", "priority": "High", "cvss": 8.6, "epss": 0.00284, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9180", "url": "https://patchblox.com/security/cve/CVE-2025-9180", "title": "Same-origin policy bypass in the Graphics: Canvas2D component", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00283, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-24869", "url": "https://patchblox.com/security/cve/CVE-2026-24869", "title": "Use-after-free in the Layout: Scrolling and Overflow component", "priority": "High", "cvss": 8.8, "epss": 0.00279, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13017", "url": "https://patchblox.com/security/cve/CVE-2025-13017", "title": "Same-origin policy bypass in the DOM: Notifications component", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13018", "url": "https://patchblox.com/security/cve/CVE-2025-13018", "title": "Mitigation bypass in the DOM: Security component", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13019", "url": "https://patchblox.com/security/cve/CVE-2025-13019", "title": "Same-origin policy bypass in the DOM: Workers component", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6756", "url": "https://patchblox.com/security/cve/CVE-2026-6756", "title": "Mitigation bypass in Firefox for Android", "priority": "High", "cvss": 7.5, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8038", "url": "https://patchblox.com/security/cve/CVE-2025-8038", "title": "CSP frame-src was not correctly enforced for paths", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00267, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8037", "url": "https://patchblox.com/security/cve/CVE-2025-8037", "title": "Nameless cookies shadow secure cookies", "priority": "High", "severity": "Medium", "cvss": 9.1, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-7321", "url": "https://patchblox.com/security/cve/CVE-2026-7321", "title": "Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component", "priority": "High", "severity": "important", "cvss": 9.6, "epss": 0.00258, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6766", "url": "https://patchblox.com/security/cve/CVE-2026-6766", "title": "Incorrect boundary conditions in the Libraries component in NSS", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2790", "url": "https://patchblox.com/security/cve/CVE-2026-2790", "title": "Same-origin policy bypass in the Networking: JAR component", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14861", "url": "https://patchblox.com/security/cve/CVE-2025-14861", "title": "Memory safety bugs fixed in Firefox 146.0.1", "priority": "High", "cvss": 8.8, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6782", "url": "https://patchblox.com/security/cve/CVE-2026-6782", "title": "Information disclosure in the IP Protection component", "priority": "High", "cvss": 7.5, "epss": 0.00253, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11153", "url": "https://patchblox.com/security/cve/CVE-2025-11153", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "High", "cvss": 7.5, "epss": 0.00244, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13012", "url": "https://patchblox.com/security/cve/CVE-2025-13012", "title": "Race condition in the Graphics component", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00243, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6764", "url": "https://patchblox.com/security/cve/CVE-2026-6764", "title": "Incorrect boundary conditions in the DOM: Device Interfaces component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11711", "url": "https://patchblox.com/security/cve/CVE-2025-11711", "title": "Some non-writable Object properties could be modified", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.0023, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13015", "url": "https://patchblox.com/security/cve/CVE-2025-13015", "title": "Spoofing issue in Firefox", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6767", "url": "https://patchblox.com/security/cve/CVE-2026-6767", "title": "Other issue in the Libraries component in NSS", "priority": "High", "severity": "medium", "cvss": 8.8, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6769", "url": "https://patchblox.com/security/cve/CVE-2026-6769", "title": "Privilege escalation in the Debugger component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00226, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6761", "url": "https://patchblox.com/security/cve/CVE-2026-6761", "title": "Privilege escalation in the Networking component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00221, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11712", "url": "https://patchblox.com/security/cve/CVE-2025-11712", "title": "An OBJECT tag type attribute overrode browser behavior on web resources without a content-type", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00221, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-13013", "url": "https://patchblox.com/security/cve/CVE-2025-13013", "title": "Mitigation bypass in the DOM: Core \u0026 HTML component", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6765", "url": "https://patchblox.com/security/cve/CVE-2026-6765", "title": "Information disclosure in the Form Autofill component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14331", "url": "https://patchblox.com/security/cve/CVE-2025-14331", "title": "Same-origin policy bypass in the Request Handling component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6763", "url": "https://patchblox.com/security/cve/CVE-2026-6763", "title": "Mitigation bypass in the File Handling component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6762", "url": "https://patchblox.com/security/cve/CVE-2026-6762", "title": "Spoofing issue in the DOM: Core \u0026 HTML component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10536", "url": "https://patchblox.com/security/cve/CVE-2025-10536", "title": "Information disclosure in the Networking: Cache component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6776", "url": "https://patchblox.com/security/cve/CVE-2026-6776", "title": "Incorrect boundary conditions in the WebRTC: Networking component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.0011, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2804", "url": "https://patchblox.com/security/cve/CVE-2026-2804", "title": "Use-after-free in the JavaScript: WebAssembly component", "priority": "Routine", "cvss": 5.4, "epss": 0.0047, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0888", "url": "https://patchblox.com/security/cve/CVE-2026-0888", "title": "Information disclosure in the XML component", "priority": "Routine", "cvss": 5.3, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10530", "url": "https://patchblox.com/security/cve/CVE-2025-10530", "title": "Spoofing issue in the WebAuthn component in Firefox for Android", "priority": "Routine", "cvss": 6.5, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9183", "url": "https://patchblox.com/security/cve/CVE-2025-9183", "title": "Spoofing issue in the Address Bar component", "priority": "Routine", "severity": "important", "cvss": 6.5, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10531", "url": "https://patchblox.com/security/cve/CVE-2025-10531", "title": "Mitigation bypass in the Web Compatibility: Tooling component", "priority": "Routine", "cvss": 5.4, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6778", "url": "https://patchblox.com/security/cve/CVE-2026-6778", "title": "Invalid pointer in the Audio/Video: Playback component", "priority": "Routine", "cvss": 5.3, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6755", "url": "https://patchblox.com/security/cve/CVE-2026-6755", "title": "Mitigation bypass in the DOM: postMessage component", "priority": "Routine", "cvss": 6.5, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4728", "url": "https://patchblox.com/security/cve/CVE-2026-4728", "title": "Spoofing issue in the Privacy: Anti-Tracking component", "priority": "Routine", "cvss": 6.5, "epss": 0.00244, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9186", "url": "https://patchblox.com/security/cve/CVE-2025-9186", "title": "Spoofing issue in the Address Bar component of Firefox Focus for Android", "priority": "Routine", "cvss": 6.5, "epss": 0.00235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6783", "url": "https://patchblox.com/security/cve/CVE-2026-6783", "title": "Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component", "priority": "Routine", "cvss": 5.3, "epss": 0.0023, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-24868", "url": "https://patchblox.com/security/cve/CVE-2026-24868", "title": "Mitigation bypass in the Privacy: Anti-Tracking component", "priority": "Routine", "cvss": 6.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6775", "url": "https://patchblox.com/security/cve/CVE-2026-6775", "title": "Incorrect boundary conditions in the WebRTC component", "priority": "Routine", "cvss": 5.3, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6779", "url": "https://patchblox.com/security/cve/CVE-2026-6779", "title": "Other issue in the JavaScript Engine component", "priority": "Routine", "cvss": 5.3, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2802", "url": "https://patchblox.com/security/cve/CVE-2026-2802", "title": "Race condition in the JavaScript: GC component", "priority": "Routine", "cvss": 4.2, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6777", "url": "https://patchblox.com/security/cve/CVE-2026-6777", "title": "Other issue in the Networking: DNS component", "priority": "Routine", "cvss": 5.3, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6774", "url": "https://patchblox.com/security/cve/CVE-2026-6774", "title": "Mitigation bypass in the DOM: Security component", "priority": "Routine", "cvss": 5.4, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-3846", "url": "https://patchblox.com/security/cve/CVE-2026-3846", "title": "Same-origin policy bypass in the CSS Parsing and Computation component", "priority": "Routine", "cvss": 6.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T07:50:38Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }