{
  "fix": "Mozilla Thunderbird (en-US) 156.0",
  "url": "https://patchblox.com/security/fix/windows-app/mozilla.thunderbird-156.0",
  "summary": "Mozilla Thunderbird (en-US) 156.0, released September 15, 2026, fixes 75 CVEs in Mozilla Thunderbird (en-US). None of them is reported as exploited. Patch Radar priority: Urgent. The latest Mozilla Thunderbird (en-US) is 159.0, which also fixes every one of these CVEs.",
  "platform": "windows-app",
  "type": "app-version",
  "title": "Mozilla Thunderbird (en-US) 156.0",
  "released": "2026-09-15T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-92240, rated Critical",
  "supported": true,
  "cveCount": 75,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00628,
  "maxCvss": 9.8,
  "appliesTo": [
    {
      "product": "Mozilla Thunderbird (en-US)",
      "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-thunderbird-en-us",
      "fixedVersion": "156.0",
      "latestVersion": "159.0",
      "supported": true
    }
  ],
  "supersededBy": {
    "product": "Mozilla Thunderbird (en-US)",
    "latestVersion": "159.0",
    "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-thunderbird-en-us"
  },
  "cves": [
    {
      "cveId": "CVE-2026-92240",
      "url": "https://patchblox.com/security/cve/CVE-2026-92240",
      "title": "Out-of-bounds read in IMAP response parser",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00628,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92036",
      "url": "https://patchblox.com/security/cve/CVE-2026-92036",
      "title": "Incorrect boundary conditions in the Networking: HTTP component",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.00551,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92037",
      "url": "https://patchblox.com/security/cve/CVE-2026-92037",
      "title": "Incorrect boundary conditions in the DOM: Animation component",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.00551,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92061",
      "url": "https://patchblox.com/security/cve/CVE-2026-92061",
      "title": "Incorrect boundary conditions in the Security: Process Sandboxing component",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.00551,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92066",
      "url": "https://patchblox.com/security/cve/CVE-2026-92066",
      "title": "Sandbox escape in the Profile Backup component",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.00551,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92238",
      "url": "https://patchblox.com/security/cve/CVE-2026-92238",
      "title": "Ambiguous parsing of mail headers",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00539,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92051",
      "url": "https://patchblox.com/security/cve/CVE-2026-92051",
      "title": "Spoofing issue due to invalid pointer in the Graphics component",
      "priority": "Urgent",
      "cvss": 9.1,
      "epss": 0.00531,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92050",
      "url": "https://patchblox.com/security/cve/CVE-2026-92050",
      "title": "Sandbox escape due to race condition in the XPConnect component",
      "priority": "Urgent",
      "cvss": 9.1,
      "epss": 0.0041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92018",
      "url": "https://patchblox.com/security/cve/CVE-2026-92018",
      "title": "Sandbox escape in the DOM: Core \u0026 HTML component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00328,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92032",
      "url": "https://patchblox.com/security/cve/CVE-2026-92032",
      "title": "Sandbox escape due to invalid pointer in the Graphics component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00321,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92038",
      "url": "https://patchblox.com/security/cve/CVE-2026-92038",
      "title": "Mitigation bypass in the Remote Settings Client component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92041",
      "url": "https://patchblox.com/security/cve/CVE-2026-92041",
      "title": "Mitigation bypass in the DOM: Networking component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92075",
      "url": "https://patchblox.com/security/cve/CVE-2026-92075",
      "title": "Mitigation bypass in the Networking component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92045",
      "url": "https://patchblox.com/security/cve/CVE-2026-92045",
      "title": "Sandbox escape due to incorrect boundary conditions in the WebRTC component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.003,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92048",
      "url": "https://patchblox.com/security/cve/CVE-2026-92048",
      "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component",
      "priority": "Urgent",
      "cvss": 9,
      "epss": 0.00283,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92034",
      "url": "https://patchblox.com/security/cve/CVE-2026-92034",
      "title": "Site isolation issue in the Graphics component",
      "priority": "Urgent",
      "cvss": 9.1,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92057",
      "url": "https://patchblox.com/security/cve/CVE-2026-92057",
      "title": "Mitigation bypass in the Enterprise Policies component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00251,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92079",
      "url": "https://patchblox.com/security/cve/CVE-2026-92079",
      "title": "Mitigation bypass in the Widget: Win32 component",
      "priority": "Urgent",
      "cvss": 9.1,
      "epss": 0.00251,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92071",
      "url": "https://patchblox.com/security/cve/CVE-2026-92071",
      "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component",
      "priority": "Urgent",
      "cvss": 9.6,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92059",
      "url": "https://patchblox.com/security/cve/CVE-2026-92059",
      "title": "Incorrect boundary conditions in the DOM: Editor component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.3,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92040",
      "url": "https://patchblox.com/security/cve/CVE-2026-92040",
      "title": "Use-after-free in the JavaScript: WebAssembly component",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.00422,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92239",
      "url": "https://patchblox.com/security/cve/CVE-2026-92239",
      "title": "Buffer overrun in IMAP",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92005",
      "url": "https://patchblox.com/security/cve/CVE-2026-92005",
      "title": "Use-after-free in the Audio/Video: Web Codecs component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00357,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92035",
      "url": "https://patchblox.com/security/cve/CVE-2026-92035",
      "title": "Sandbox escape due to incorrect boundary conditions in the Graphics component",
      "priority": "High",
      "severity": "important",
      "cvss": 9.6,
      "epss": 0.00328,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92006",
      "url": "https://patchblox.com/security/cve/CVE-2026-92006",
      "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00328,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92044",
      "url": "https://patchblox.com/security/cve/CVE-2026-92044",
      "title": "Information disclosure in the Networking: HTTP component",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00322,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92022",
      "url": "https://patchblox.com/security/cve/CVE-2026-92022",
      "title": "Use-after-free in the DOM: HTML Parser component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00319,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92023",
      "url": "https://patchblox.com/security/cve/CVE-2026-92023",
      "title": "Use-after-free in the XML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00319,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92024",
      "url": "https://patchblox.com/security/cve/CVE-2026-92024",
      "title": "Use-after-free in the SVG component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00319,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92025",
      "url": "https://patchblox.com/security/cve/CVE-2026-92025",
      "title": "Use-after-free in the DOM: Navigation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00319,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92027",
      "url": "https://patchblox.com/security/cve/CVE-2026-92027",
      "title": "Use-after-free in the DOM: Streams component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00319,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92028",
      "url": "https://patchblox.com/security/cve/CVE-2026-92028",
      "title": "Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00319,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92029",
      "url": "https://patchblox.com/security/cve/CVE-2026-92029",
      "title": "Use-after-free in the SVG component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00319,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92016",
      "url": "https://patchblox.com/security/cve/CVE-2026-92016",
      "title": "Use-after-free in the Disability Access APIs component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00312,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92026",
      "url": "https://patchblox.com/security/cve/CVE-2026-92026",
      "title": "Use-after-free in the Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00312,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92019",
      "url": "https://patchblox.com/security/cve/CVE-2026-92019",
      "title": "Mitigation bypass in the Remote Settings Client component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00307,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92031",
      "url": "https://patchblox.com/security/cve/CVE-2026-92031",
      "title": "Information disclosure in the Graphics: ImageLib component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00306,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92046",
      "url": "https://patchblox.com/security/cve/CVE-2026-92046",
      "title": "Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00292,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92015",
      "url": "https://patchblox.com/security/cve/CVE-2026-92015",
      "title": "Privilege escalation in the WebExtensions component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0026,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92007",
      "url": "https://patchblox.com/security/cve/CVE-2026-92007",
      "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92008",
      "url": "https://patchblox.com/security/cve/CVE-2026-92008",
      "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92009",
      "url": "https://patchblox.com/security/cve/CVE-2026-92009",
      "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92010",
      "url": "https://patchblox.com/security/cve/CVE-2026-92010",
      "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92011",
      "url": "https://patchblox.com/security/cve/CVE-2026-92011",
      "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92012",
      "url": "https://patchblox.com/security/cve/CVE-2026-92012",
      "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92013",
      "url": "https://patchblox.com/security/cve/CVE-2026-92013",
      "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92020",
      "url": "https://patchblox.com/security/cve/CVE-2026-92020",
      "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92053",
      "url": "https://patchblox.com/security/cve/CVE-2026-92053",
      "title": "Privilege escalation in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92054",
      "url": "https://patchblox.com/security/cve/CVE-2026-92054",
      "title": "Privilege escalation in the Memory component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00244,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92017",
      "url": "https://patchblox.com/security/cve/CVE-2026-92017",
      "title": "Privilege escalation in the DOM: Service Workers component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92043",
      "url": "https://patchblox.com/security/cve/CVE-2026-92043",
      "title": "Privilege escalation due to incorrect boundary conditions in the Audio/Video component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92052",
      "url": "https://patchblox.com/security/cve/CVE-2026-92052",
      "title": "Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92049",
      "url": "https://patchblox.com/security/cve/CVE-2026-92049",
      "title": "Use-after-free in the Widget: Win32 component",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92056",
      "url": "https://patchblox.com/security/cve/CVE-2026-92056",
      "title": "Use-after-free in the Graphics: Text component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92058",
      "url": "https://patchblox.com/security/cve/CVE-2026-92058",
      "title": "Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92060",
      "url": "https://patchblox.com/security/cve/CVE-2026-92060",
      "title": "Use-after-free in the Internationalization component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92067",
      "url": "https://patchblox.com/security/cve/CVE-2026-92067",
      "title": "Use-after-free in the Widget: Gtk component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92055",
      "url": "https://patchblox.com/security/cve/CVE-2026-92055",
      "title": "Privilege escalation in the DevTools component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92072",
      "url": "https://patchblox.com/security/cve/CVE-2026-92072",
      "title": "Incorrect boundary conditions in the Safe Browsing component",
      "priority": "High",
      "severity": "high",
      "cvss": 8,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92042",
      "url": "https://patchblox.com/security/cve/CVE-2026-92042",
      "title": "Race condition in the DOM: Content Processes component",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92047",
      "url": "https://patchblox.com/security/cve/CVE-2026-92047",
      "title": "Privilege escalation in the Crash Reporting component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00221,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92062",
      "url": "https://patchblox.com/security/cve/CVE-2026-92062",
      "title": "Privilege escalation in the Session Restore component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00221,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92073",
      "url": "https://patchblox.com/security/cve/CVE-2026-92073",
      "title": "Privilege escalation in the Enterprise Policies component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00221,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92030",
      "url": "https://patchblox.com/security/cve/CVE-2026-92030",
      "title": "Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92074",
      "url": "https://patchblox.com/security/cve/CVE-2026-92074",
      "title": "Mitigation bypass in the Popup Blocker component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00109,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92076",
      "url": "https://patchblox.com/security/cve/CVE-2026-92076",
      "title": "Incorrect boundary conditions in the Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00109,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92064",
      "url": "https://patchblox.com/security/cve/CVE-2026-92064",
      "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.00103,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92065",
      "url": "https://patchblox.com/security/cve/CVE-2026-92065",
      "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.00103,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92063",
      "url": "https://patchblox.com/security/cve/CVE-2026-92063",
      "title": "Denial-of-service in the Audio/Video component",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00384,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92077",
      "url": "https://patchblox.com/security/cve/CVE-2026-92077",
      "title": "Denial-of-service in the SVG component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00272,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92078",
      "url": "https://patchblox.com/security/cve/CVE-2026-92078",
      "title": "Denial-of-service in the Security component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92039",
      "url": "https://patchblox.com/security/cve/CVE-2026-92039",
      "title": "Mitigation bypass in the DOM: Notifications component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.3,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92070",
      "url": "https://patchblox.com/security/cve/CVE-2026-92070",
      "title": "Information disclosure in the Networking component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.3,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92069",
      "url": "https://patchblox.com/security/cve/CVE-2026-92069",
      "title": "Spoofing issue in the DOM: Navigation component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.4,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92068",
      "url": "https://patchblox.com/security/cve/CVE-2026-92068",
      "title": "Site isolation issue in the Reader Mode component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.4,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}