{ "fix": "Mozilla Thunderbird ESR (lv) 153.0.1", "url": "https://patchblox.com/security/fix/windows-app/mozilla.thunderbird.esr.lv-153.0.1", "summary": "Mozilla Thunderbird ESR (lv) 153.0.1, released July 23, 2026, fixes 272 CVEs in Mozilla Thunderbird ESR (lv). None of them is reported as exploited. Patch Radar priority: Urgent. The latest Mozilla Thunderbird ESR (lv) is 153.7.0, which also fixes every one of these CVEs.", "platform": "windows-app", "type": "app-version", "title": "Mozilla Thunderbird ESR (lv) 153.0.1", "released": "2026-07-23T00:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-2796, rated Critical", "supported": true, "cveCount": 272, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00948, "maxCvss": 10, "appliesTo": [ { "product": "Mozilla Thunderbird ESR (lv)", "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-thunderbird-esr-lv", "fixedVersion": "153.0.1", "latestVersion": "153.7.0", "supported": true } ], "supersededBy": { "product": "Mozilla Thunderbird ESR (lv)", "latestVersion": "153.7.0", "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-thunderbird-esr-lv" }, "cves": [ { "cveId": "CVE-2026-2796", "url": "https://patchblox.com/security/cve/CVE-2026-2796", "title": "JIT miscompilation in the JavaScript: WebAssembly component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00948, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16357", "url": "https://patchblox.com/security/cve/CVE-2026-16357", "title": "Incorrect boundary conditions in the Graphics component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00868, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2805", "url": "https://patchblox.com/security/cve/CVE-2026-2805", "title": "Invalid pointer in the DOM: Core \u0026 HTML component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00657, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16402", "url": "https://patchblox.com/security/cve/CVE-2026-16402", "title": "Integer overflow in the Graphics: ImageLib component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00619, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8028", "url": "https://patchblox.com/security/cve/CVE-2025-8028", "title": "Large branch table could lead to truncated instruction", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.0058, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16389", "url": "https://patchblox.com/security/cve/CVE-2026-16389", "title": "Incorrect boundary conditions, integer overflow in the Libraries component in NSS", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00565, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16382", "url": "https://patchblox.com/security/cve/CVE-2026-16382", "title": "Mitigation bypass in the DOM: Service Workers component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00556, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16388", "url": "https://patchblox.com/security/cve/CVE-2026-16388", "title": "Sandbox escape in the DOM: Networking component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00551, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16410", "url": "https://patchblox.com/security/cve/CVE-2026-16410", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00551, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2799", "url": "https://patchblox.com/security/cve/CVE-2026-2799", "title": "Use-after-free in the DOM: Core \u0026 HTML component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16393", "url": "https://patchblox.com/security/cve/CVE-2026-16393", "title": "Incorrect boundary conditions in the Graphics: WebGPU component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16392", "url": "https://patchblox.com/security/cve/CVE-2026-16392", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00531, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2797", "url": "https://patchblox.com/security/cve/CVE-2026-2797", "title": "Use-after-free in the JavaScript: GC component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00526, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9187", "url": "https://patchblox.com/security/cve/CVE-2025-9187", "title": "Memory safety bugs fixed in Firefox 142 and Thunderbird 142", "priority": "Urgent", "cvss": 9.8, "epss": 0.0052, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4724", "url": "https://patchblox.com/security/cve/CVE-2026-4724", "title": "Undefined behavior in the Audio/Video component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00518, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16353", "url": "https://patchblox.com/security/cve/CVE-2026-16353", "title": "Invalid pointer in the DOM: Bindings (WebIDL) component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00517, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16407", "url": "https://patchblox.com/security/cve/CVE-2026-16407", "title": "Mitigation bypass in the DOM: Service Workers component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8031", "url": "https://patchblox.com/security/cve/CVE-2025-8031", "title": "Incorrect URL stripping in CSP reports", "priority": "Urgent", "severity": "CRITICAL", "cvss": 9.8, "epss": 0.00511, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14326", "url": "https://patchblox.com/security/cve/CVE-2025-14326", "title": "Use-after-free in the Audio/Video: GMP component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00496, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8044", "url": "https://patchblox.com/security/cve/CVE-2025-8044", "title": "Memory safety bugs fixed in Firefox 141 and Thunderbird 141", "priority": "Urgent", "cvss": 9.8, "epss": 0.00483, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16360", "url": "https://patchblox.com/security/cve/CVE-2026-16360", "title": "Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00468, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8034", "url": "https://patchblox.com/security/cve/CVE-2025-8034", "title": "Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141", "priority": "Urgent", "severity": "CRITICAL", "cvss": 8.8, "epss": 0.00461, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2806", "url": "https://patchblox.com/security/cve/CVE-2026-2806", "title": "Uninitialized memory in the Graphics: Text component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00454, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0892", "url": "https://patchblox.com/security/cve/CVE-2026-0892", "title": "Memory safety bugs fixed in Firefox 147 and Thunderbird 147", "priority": "Urgent", "cvss": 9.8, "epss": 0.00452, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8043", "url": "https://patchblox.com/security/cve/CVE-2025-8043", "title": "Incorrect URL truncation", "priority": "Urgent", "cvss": 9.8, "epss": 0.00437, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16363", "url": "https://patchblox.com/security/cve/CVE-2026-16363", "title": "JIT miscompilation in the JavaScript: WebAssembly component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00436, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16369", "url": "https://patchblox.com/security/cve/CVE-2026-16369", "title": "Integer overflow in the JavaScript: WebAssembly component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00436, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16370", "url": "https://patchblox.com/security/cve/CVE-2026-16370", "title": "Mitigation bypass in the DOM: Networking component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8027", "url": "https://patchblox.com/security/cve/CVE-2025-8027", "title": "JavaScript engine only wrote partial return value to stack", "priority": "Urgent", "severity": "CRITICAL", "cvss": 7.5, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8033", "url": "https://patchblox.com/security/cve/CVE-2025-8033", "title": "Incorrect JavaScript state machine for generators", "priority": "Urgent", "severity": "CRITICAL", "cvss": 7.5, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16364", "url": "https://patchblox.com/security/cve/CVE-2026-16364", "title": "Incorrect boundary conditions in the Audio/Video: Playback component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00429, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8948", "url": "https://patchblox.com/security/cve/CVE-2026-8948", "title": "Same-origin policy bypass in the DOM: Networking component", "priority": "Urgent", "cvss": 9.1, "epss": 0.0042, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16350", "url": "https://patchblox.com/security/cve/CVE-2026-16350", "title": "Incorrect boundary conditions in the Audio/Video: cubeb component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16355", "url": "https://patchblox.com/security/cve/CVE-2026-16355", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16351", "url": "https://patchblox.com/security/cve/CVE-2026-16351", "title": "Sandbox escape due to use-after-free in the DOM: Navigation component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00394, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16352", "url": "https://patchblox.com/security/cve/CVE-2026-16352", "title": "Sandbox escape due to use-after-free in the Disability Access APIs component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00394, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16356", "url": "https://patchblox.com/security/cve/CVE-2026-16356", "title": "Sandbox escape due to use-after-free in the Disability Access APIs component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00394, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16368", "url": "https://patchblox.com/security/cve/CVE-2026-16368", "title": "Incorrect boundary conditions in the JavaScript: WebAssembly component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00388, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16377", "url": "https://patchblox.com/security/cve/CVE-2026-16377", "title": "Mitigation bypass in the PDF Viewer component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16383", "url": "https://patchblox.com/security/cve/CVE-2026-16383", "title": "Mitigation bypass in the DOM: Networking component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16367", "url": "https://patchblox.com/security/cve/CVE-2026-16367", "title": "Sandbox escape due to invalid pointer in the Disability Access APIs component", "priority": "Urgent", "cvss": 10, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2800", "url": "https://patchblox.com/security/cve/CVE-2026-2800", "title": "Spoofing issue in the WebAuthn component in Firefox for Android", "priority": "Urgent", "cvss": 9.8, "epss": 0.00352, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0881", "url": "https://patchblox.com/security/cve/CVE-2026-0881", "title": "Sandbox escape in the Messaging System component", "priority": "Urgent", "cvss": 10, "epss": 0.00351, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4729", "url": "https://patchblox.com/security/cve/CVE-2026-4729", "title": "Memory safety bugs fixed in Firefox 149 and Thunderbird 149", "priority": "Urgent", "cvss": 9.8, "epss": 0.00351, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16390", "url": "https://patchblox.com/security/cve/CVE-2026-16390", "title": "Mitigation bypass in the Enterprise Policies component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00316, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16361", "url": "https://patchblox.com/security/cve/CVE-2026-16361", "title": "Memory safety bugs fixed in Thunderbird ESR 140.13", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00315, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16380", "url": "https://patchblox.com/security/cve/CVE-2026-16380", "title": "Mitigation bypass in the Networking component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00309, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12293", "url": "https://patchblox.com/security/cve/CVE-2026-12293", "title": "Use-after-free in the Graphics: WebGPU component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00302, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2795", "url": "https://patchblox.com/security/cve/CVE-2026-2795", "title": "Use-after-free in the JavaScript: GC component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00296, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2807", "url": "https://patchblox.com/security/cve/CVE-2026-2807", "title": "Memory safety bugs fixed in Firefox 148 and Thunderbird 148", "priority": "Urgent", "cvss": 9.8, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6768", "url": "https://patchblox.com/security/cve/CVE-2026-6768", "title": "Mitigation bypass in the Networking: Cookies component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00285, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6760", "url": "https://patchblox.com/security/cve/CVE-2026-6760", "title": "Mitigation bypass in the Networking: Cookies component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00279, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-5735", "url": "https://patchblox.com/security/cve/CVE-2026-5735", "title": "Memory safety bugs fixed in Firefox 149.0.2 and Thunderbird 149.0.2", "priority": "Urgent", "cvss": 9.8, "epss": 0.00267, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16359", "url": "https://patchblox.com/security/cve/CVE-2026-16359", "title": "Incorrect boundary conditions in the Audio/Video: GMP component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12316", "url": "https://patchblox.com/security/cve/CVE-2026-12316", "title": "Mitigation bypass in the DOM: Security component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00245, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16358", "url": "https://patchblox.com/security/cve/CVE-2026-16358", "title": "Site isolation issue in the Graphics: WebRender component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16349", "url": "https://patchblox.com/security/cve/CVE-2026-16349", "title": "Same-origin policy bypass in the DOM: Navigation component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16375", "url": "https://patchblox.com/security/cve/CVE-2026-16375", "title": "Site isolation issue in the Networking: HTTP component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16387", "url": "https://patchblox.com/security/cve/CVE-2026-16387", "title": "Site isolation issue in the Networking component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16381", "url": "https://patchblox.com/security/cve/CVE-2026-16381", "title": "Same-origin policy bypass in the Networking: DNS component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2773", "url": "https://patchblox.com/security/cve/CVE-2026-2773", "title": "Incorrect boundary conditions in the Web Audio component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00917, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2774", "url": "https://patchblox.com/security/cve/CVE-2026-2774", "title": "Integer overflow in the Audio/Video component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00852, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2775", "url": "https://patchblox.com/security/cve/CVE-2026-2775", "title": "Mitigation bypass in the DOM: HTML Parser component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00837, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4694", "url": "https://patchblox.com/security/cve/CVE-2026-4694", "title": "Incorrect boundary conditions, integer overflow in the Graphics component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.2, "epss": 0.0082, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6758", "url": "https://patchblox.com/security/cve/CVE-2026-6758", "title": "Use-after-free in the JavaScript: WebAssembly component", "priority": "High", "cvss": 7.5, "epss": 0.00809, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2771", "url": "https://patchblox.com/security/cve/CVE-2026-2771", "title": "Undefined behavior in the DOM: Core \u0026 HTML component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00759, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2763", "url": "https://patchblox.com/security/cve/CVE-2026-2763", "title": "Use-after-free in the JavaScript Engine component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2764", "url": "https://patchblox.com/security/cve/CVE-2026-2764", "title": "JIT miscompilation, use-after-free in the JavaScript Engine: JIT component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2765", "url": "https://patchblox.com/security/cve/CVE-2026-2765", "title": "Use-after-free in the JavaScript Engine component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2766", "url": "https://patchblox.com/security/cve/CVE-2026-2766", "title": "Use-after-free in the JavaScript Engine: JIT component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2770", "url": "https://patchblox.com/security/cve/CVE-2026-2770", "title": "Use-after-free in the DOM: Bindings (WebIDL) component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2772", "url": "https://patchblox.com/security/cve/CVE-2026-2772", "title": "Use-after-free in the Audio/Video: Playback component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00737, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4689", "url": "https://patchblox.com/security/cve/CVE-2026-4689", "title": "Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component", "priority": "High", "severity": "IMPORTANT", "cvss": 10, "epss": 0.00706, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2779", "url": "https://patchblox.com/security/cve/CVE-2026-2779", "title": "Incorrect boundary conditions in the Networking: JAR component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00686, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2769", "url": "https://patchblox.com/security/cve/CVE-2026-2769", "title": "Use-after-free in the Storage: IndexedDB component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00686, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2788", "url": "https://patchblox.com/security/cve/CVE-2026-2788", "title": "Incorrect boundary conditions in the Audio/Video: GMP component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00677, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9179", "url": "https://patchblox.com/security/cve/CVE-2025-9179", "title": "Sandbox escape due to invalid pointer in the Audio/Video: GMP component", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.0065, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2787", "url": "https://patchblox.com/security/cve/CVE-2026-2787", "title": "Use-after-free in the DOM: Window and Location component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00641, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14321", "url": "https://patchblox.com/security/cve/CVE-2025-14321", "title": "Use-after-free in the WebRTC: Signaling component", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00639, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2762", "url": "https://patchblox.com/security/cve/CVE-2026-2762", "title": "Integer overflow in the JavaScript: Standard Library component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00632, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14324", "url": "https://patchblox.com/security/cve/CVE-2025-14324", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00605, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8956", "url": "https://patchblox.com/security/cve/CVE-2026-8956", "title": "Integer overflow in the Networking: JAR component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00605, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2791", "url": "https://patchblox.com/security/cve/CVE-2026-2791", "title": "Mitigation bypass in the Networking: Cache component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00599, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2757", "url": "https://patchblox.com/security/cve/CVE-2026-2757", "title": "Incorrect boundary conditions in the WebRTC: Audio/Video component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8949", "url": "https://patchblox.com/security/cve/CVE-2026-8949", "title": "Integer overflow in the Widget: Win32 component", "priority": "High", "cvss": 7.5, "epss": 0.00583, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2785", "url": "https://patchblox.com/security/cve/CVE-2026-2785", "title": "Invalid pointer in the JavaScript Engine component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2758", "url": "https://patchblox.com/security/cve/CVE-2026-2758", "title": "Use-after-free in the JavaScript: GC component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00573, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4726", "url": "https://patchblox.com/security/cve/CVE-2026-4726", "title": "Denial-of-service in the XML component", "priority": "High", "cvss": 7.5, "epss": 0.00563, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4727", "url": "https://patchblox.com/security/cve/CVE-2026-4727", "title": "Denial-of-service in the Libraries component in NSS", "priority": "High", "cvss": 7.5, "epss": 0.00563, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2776", "url": "https://patchblox.com/security/cve/CVE-2026-2776", "title": "Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software", "priority": "High", "severity": "IMPORTANT", "cvss": 10, "epss": 0.00562, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2778", "url": "https://patchblox.com/security/cve/CVE-2026-2778", "title": "Sandbox escape due to incorrect boundary conditions in the DOM: Core \u0026 HTML component", "priority": "High", "severity": "IMPORTANT", "cvss": 10, "epss": 0.00562, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0880", "url": "https://patchblox.com/security/cve/CVE-2026-0880", "title": "Sandbox escape due to integer overflow in the Graphics component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14330", "url": "https://patchblox.com/security/cve/CVE-2025-14330", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00542, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9185", "url": "https://patchblox.com/security/cve/CVE-2025-9185", "title": "Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.0054, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2789", "url": "https://patchblox.com/security/cve/CVE-2026-2789", "title": "Use-after-free in the Graphics: ImageLib component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.0053, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4692", "url": "https://patchblox.com/security/cve/CVE-2026-4692", "title": "Sandbox escape in the Responsive Design Mode component", "priority": "High", "severity": "IMPORTANT", "cvss": 10, "epss": 0.00517, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16376", "url": "https://patchblox.com/security/cve/CVE-2026-16376", "title": "Denial-of-service in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00517, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16409", "url": "https://patchblox.com/security/cve/CVE-2026-16409", "title": "Invalid pointer in the Security: PSM component", "priority": "High", "cvss": 7.5, "epss": 0.00517, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2786", "url": "https://patchblox.com/security/cve/CVE-2026-2786", "title": "Use-after-free in the JavaScript Engine component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0879", "url": "https://patchblox.com/security/cve/CVE-2026-0879", "title": "Sandbox escape due to incorrect boundary conditions in the Graphics component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12292", "url": "https://patchblox.com/security/cve/CVE-2026-12292", "title": "Incorrect boundary conditions in the Web Audio component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00493, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4718", "url": "https://patchblox.com/security/cve/CVE-2026-4718", "title": "Undefined behavior in the WebRTC: Signaling component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.2, "epss": 0.00492, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2784", "url": "https://patchblox.com/security/cve/CVE-2026-2784", "title": "Mitigation bypass in the DOM: Security component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00488, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12328", "url": "https://patchblox.com/security/cve/CVE-2026-12328", "title": "Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00476, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2760", "url": "https://patchblox.com/security/cve/CVE-2026-2760", "title": "Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component", "priority": "High", "severity": "IMPORTANT", "cvss": 10, "epss": 0.00475, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2761", "url": "https://patchblox.com/security/cve/CVE-2026-2761", "title": "Sandbox escape in the Graphics: WebRender component", "priority": "High", "severity": "IMPORTANT", "cvss": 10, "epss": 0.00475, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2759", "url": "https://patchblox.com/security/cve/CVE-2026-2759", "title": "Incorrect boundary conditions in the Graphics: ImageLib component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00475, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0891", "url": "https://patchblox.com/security/cve/CVE-2026-0891", "title": "Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00475, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14333", "url": "https://patchblox.com/security/cve/CVE-2025-14333", "title": "Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.00473, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0877", "url": "https://patchblox.com/security/cve/CVE-2026-0877", "title": "Mitigation bypass in the DOM: Security component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00473, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8975", "url": "https://patchblox.com/security/cve/CVE-2026-8975", "title": "Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00471, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-14899", "url": "https://patchblox.com/security/cve/CVE-2026-14899", "title": "Off-by-one out of bounds read in MIME header parser for forwarding", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0878", "url": "https://patchblox.com/security/cve/CVE-2026-0878", "title": "Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "Medium", "cvss": 8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0882", "url": "https://patchblox.com/security/cve/CVE-2026-0882", "title": "Use-after-free in the IPC component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00465, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0884", "url": "https://patchblox.com/security/cve/CVE-2026-0884", "title": "Use-after-free in the JavaScript Engine component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0889", "url": "https://patchblox.com/security/cve/CVE-2026-0889", "title": "Denial-of-service in the DOM: Service Workers component", "priority": "High", "cvss": 7.5, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2767", "url": "https://patchblox.com/security/cve/CVE-2026-2767", "title": "Use-after-free in the JavaScript: WebAssembly component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00462, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4720", "url": "https://patchblox.com/security/cve/CVE-2026-4720", "title": "Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4721", "url": "https://patchblox.com/security/cve/CVE-2026-4721", "title": "Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8036", "url": "https://patchblox.com/security/cve/CVE-2025-8036", "title": "DNS rebinding circumvents CORS", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.00446, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14323", "url": "https://patchblox.com/security/cve/CVE-2025-14323", "title": "Privilege escalation in the DOM: Notifications component", "priority": "High", "severity": "Medium", "cvss": 8.8, "epss": 0.00445, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2768", "url": "https://patchblox.com/security/cve/CVE-2026-2768", "title": "Sandbox escape in the Storage: IndexedDB component", "priority": "High", "severity": "IMPORTANT", "cvss": 10, "epss": 0.00439, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2777", "url": "https://patchblox.com/security/cve/CVE-2026-2777", "title": "Privilege escalation in the Messaging System component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00439, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9182", "url": "https://patchblox.com/security/cve/CVE-2025-9182", "title": "Denial-of-service due to out-of-memory in the Graphics: WebRender component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00436, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4710", "url": "https://patchblox.com/security/cve/CVE-2026-4710", "title": "Incorrect boundary conditions in the Audio/Video component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00435, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2781", "url": "https://patchblox.com/security/cve/CVE-2026-2781", "title": "Integer overflow in the Libraries component in NSS", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00433, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14328", "url": "https://patchblox.com/security/cve/CVE-2025-14328", "title": "Privilege escalation in the Netmonitor component", "priority": "High", "severity": "Medium", "cvss": 8.8, "epss": 0.00431, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14329", "url": "https://patchblox.com/security/cve/CVE-2025-14329", "title": "Privilege escalation in the Netmonitor component", "priority": "High", "severity": "Medium", "cvss": 8.8, "epss": 0.00431, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16384", "url": "https://patchblox.com/security/cve/CVE-2026-16384", "title": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16385", "url": "https://patchblox.com/security/cve/CVE-2026-16385", "title": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16386", "url": "https://patchblox.com/security/cve/CVE-2026-16386", "title": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16400", "url": "https://patchblox.com/security/cve/CVE-2026-16400", "title": "Information disclosure in the DOM: Security component", "priority": "High", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11709", "url": "https://patchblox.com/security/cve/CVE-2025-11709", "title": "Out of bounds read/write in a privileged process triggered by WebGL textures", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00422, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9184", "url": "https://patchblox.com/security/cve/CVE-2025-9184", "title": "Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.0042, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8959", "url": "https://patchblox.com/security/cve/CVE-2026-8959", "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.6, "epss": 0.00417, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16378", "url": "https://patchblox.com/security/cve/CVE-2026-16378", "title": "Other issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component", "priority": "High", "cvss": 7.5, "epss": 0.00417, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9181", "url": "https://patchblox.com/security/cve/CVE-2025-9181", "title": "Uninitialized memory in the JavaScript Engine component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00413, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8968", "url": "https://patchblox.com/security/cve/CVE-2026-8968", "title": "Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00413, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12327", "url": "https://patchblox.com/security/cve/CVE-2026-12327", "title": "Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00407, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16372", "url": "https://patchblox.com/security/cve/CVE-2026-16372", "title": "Privilege escalation in the DOM: Content Processes component", "priority": "High", "cvss": 8.8, "epss": 0.00406, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14327", "url": "https://patchblox.com/security/cve/CVE-2025-14327", "title": "Spoofing issue in the Downloads Panel component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00406, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0885", "url": "https://patchblox.com/security/cve/CVE-2026-0885", "title": "Use-after-free in the JavaScript: GC component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00404, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16366", "url": "https://patchblox.com/security/cve/CVE-2026-16366", "title": "Privilege escalation in the DOM: Navigation component", "priority": "High", "cvss": 8.8, "epss": 0.00402, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16401", "url": "https://patchblox.com/security/cve/CVE-2026-16401", "title": "Privilege escalation in the Data Loss Prevention component", "priority": "High", "cvss": 8.8, "epss": 0.00402, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8035", "url": "https://patchblox.com/security/cve/CVE-2025-8035", "title": "Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00401, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12290", "url": "https://patchblox.com/security/cve/CVE-2026-12290", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00397, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2780", "url": "https://patchblox.com/security/cve/CVE-2026-2780", "title": "Privilege escalation in the Netmonitor component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00395, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12289", "url": "https://patchblox.com/security/cve/CVE-2026-12289", "title": "Privilege escalation in the Graphics: WebRender component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00395, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12295", "url": "https://patchblox.com/security/cve/CVE-2026-12295", "title": "Sandbox escape in the DOM: Navigation component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.6, "epss": 0.00393, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12296", "url": "https://patchblox.com/security/cve/CVE-2026-12296", "title": "Sandbox escape in the Security: Process Sandboxing component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.6, "epss": 0.00393, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12297", "url": "https://patchblox.com/security/cve/CVE-2026-12297", "title": "Sandbox escape due to incorrect boundary conditions in the Networking component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.6, "epss": 0.00393, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8955", "url": "https://patchblox.com/security/cve/CVE-2026-8955", "title": "Privilege escalation in the DOM: Workers component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00386, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8957", "url": "https://patchblox.com/security/cve/CVE-2026-8957", "title": "Privilege escalation in the Enterprise Policies component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00386, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0886", "url": "https://patchblox.com/security/cve/CVE-2026-0886", "title": "Incorrect boundary conditions in the Graphics component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00383, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12291", "url": "https://patchblox.com/security/cve/CVE-2026-12291", "title": "Use-after-free in the Networking: HTTP component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00382, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2792", "url": "https://patchblox.com/security/cve/CVE-2026-2792", "title": "Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00377, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2793", "url": "https://patchblox.com/security/cve/CVE-2026-2793", "title": "Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00377, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8029", "url": "https://patchblox.com/security/cve/CVE-2025-8029", "title": "javascript: URLs executed on object and embed tags", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.00376, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8030", "url": "https://patchblox.com/security/cve/CVE-2025-8030", "title": "Potential user-assisted code execution in \u201CCopy as cURL\u201D command", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.00376, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8960", "url": "https://patchblox.com/security/cve/CVE-2026-8960", "title": "Spoofing issue in WebExtensions", "priority": "High", "cvss": 7.5, "epss": 0.00376, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-7323", "url": "https://patchblox.com/security/cve/CVE-2026-7323", "title": "Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4371", "url": "https://patchblox.com/security/cve/CVE-2026-4371", "title": "Out of bounds read in IMAP parsing", "priority": "High", "severity": "IMPORTANT", "cvss": 8.2, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8032", "url": "https://patchblox.com/security/cve/CVE-2025-8032", "title": "XSLT documents could bypass CSP", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12305", "url": "https://patchblox.com/security/cve/CVE-2026-12305", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00374, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8952", "url": "https://patchblox.com/security/cve/CVE-2026-8952", "title": "Privilege escalation in the Application Update component", "priority": "High", "cvss": 8.8, "epss": 0.00373, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8962", "url": "https://patchblox.com/security/cve/CVE-2026-8962", "title": "Mitigation bypass in the DOM: Security component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00372, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8040", "url": "https://patchblox.com/security/cve/CVE-2025-8040", "title": "Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141", "priority": "High", "severity": "Medium", "cvss": 8.8, "epss": 0.00368, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8973", "url": "https://patchblox.com/security/cve/CVE-2026-8973", "title": "Memory safety bugs fixed in Thunderbird 151", "priority": "High", "cvss": 8.8, "epss": 0.00367, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14325", "url": "https://patchblox.com/security/cve/CVE-2025-14325", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00367, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8974", "url": "https://patchblox.com/security/cve/CVE-2026-8974", "title": "Memory safety bugs fixed in Thunderbird 140.11 and Thunderbird 151", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00365, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12294", "url": "https://patchblox.com/security/cve/CVE-2026-12294", "title": "Sandbox escape in the DOM: Workers component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.6, "epss": 0.00363, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12326", "url": "https://patchblox.com/security/cve/CVE-2026-12326", "title": "Memory safety bugs fixed in Firefox 152 and Thunderbird 152", "priority": "High", "cvss": 8.1, "epss": 0.00363, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14322", "url": "https://patchblox.com/security/cve/CVE-2025-14322", "title": "Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "Medium", "cvss": 8, "epss": 0.00363, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6784", "url": "https://patchblox.com/security/cve/CVE-2026-6784", "title": "Memory safety bugs fixed in Firefox 150 and Thunderbird 150", "priority": "High", "cvss": 7.5, "epss": 0.00361, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10534", "url": "https://patchblox.com/security/cve/CVE-2025-10534", "title": "Spoofing issue in the Site Permissions component", "priority": "High", "cvss": 8.1, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0883", "url": "https://patchblox.com/security/cve/CVE-2026-0883", "title": "Information disclosure in the Networking component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8958", "url": "https://patchblox.com/security/cve/CVE-2026-8958", "title": "Information disclosure, sandbox escape in the Security: Process Sandboxing component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.6, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-5734", "url": "https://patchblox.com/security/cve/CVE-2026-5734", "title": "Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00342, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2783", "url": "https://patchblox.com/security/cve/CVE-2026-2783", "title": "Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00342, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16354", "url": "https://patchblox.com/security/cve/CVE-2026-16354", "title": "Information disclosure in the Graphics: ImageLib component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00341, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8039", "url": "https://patchblox.com/security/cve/CVE-2025-8039", "title": "Search terms persisted in URL bar", "priority": "High", "severity": "Medium", "cvss": 8.1, "epss": 0.0034, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2782", "url": "https://patchblox.com/security/cve/CVE-2026-2782", "title": "Privilege escalation in the Netmonitor component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00339, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10537", "url": "https://patchblox.com/security/cve/CVE-2025-10537", "title": "Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00339, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2801", "url": "https://patchblox.com/security/cve/CVE-2026-2801", "title": "Incorrect boundary conditions in the JavaScript: WebAssembly component", "priority": "High", "cvss": 7.5, "epss": 0.00337, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14332", "url": "https://patchblox.com/security/cve/CVE-2025-14332", "title": "Memory safety bugs fixed in Firefox 146 and Thunderbird 146", "priority": "High", "cvss": 7.3, "epss": 0.00333, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8966", "url": "https://patchblox.com/security/cve/CVE-2026-8966", "title": "Information disclosure in the IP Protection component", "priority": "High", "cvss": 7.5, "epss": 0.00332, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8967", "url": "https://patchblox.com/security/cve/CVE-2026-8967", "title": "Information disclosure in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00332, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8972", "url": "https://patchblox.com/security/cve/CVE-2026-8972", "title": "Privilege escalation in the WebRTC: Audio/Video component", "priority": "High", "cvss": 8.8, "epss": 0.0033, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-11715", "url": "https://patchblox.com/security/cve/CVE-2025-11715", "title": "Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00328, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0887", "url": "https://patchblox.com/security/cve/CVE-2026-0887", "title": "Clickjacking issue, information disclosure in the PDF Viewer component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00326, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6773", "url": "https://patchblox.com/security/cve/CVE-2026-6773", "title": "Denial-of-service due to integer overflow in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00324, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8965", "url": "https://patchblox.com/security/cve/CVE-2026-8965", "title": "Information disclosure in the DOM: Security component", "priority": "High", "cvss": 7.5, "epss": 0.00324, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-7320", "url": "https://patchblox.com/security/cve/CVE-2026-7320", "title": "Information disclosure due to incorrect boundary conditions in the Audio/Video component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00323, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8093", "url": "https://patchblox.com/security/cve/CVE-2026-8093", "title": "Memory safety bugs fixed in Thunderbird 150.0.2", "priority": "High", "cvss": 8.1, "epss": 0.00323, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16374", "url": "https://patchblox.com/security/cve/CVE-2026-16374", "title": "Information disclosure in the Framework component in DevTools", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00322, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16391", "url": "https://patchblox.com/security/cve/CVE-2026-16391", "title": "Information disclosure in the Storage: IndexedDB component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00322, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8961", "url": "https://patchblox.com/security/cve/CVE-2026-8961", "title": "Spoofing issue in the Form Autofill component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00322, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10529", "url": "https://patchblox.com/security/cve/CVE-2025-10529", "title": "Same-origin policy bypass in the Layout component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8090", "url": "https://patchblox.com/security/cve/CVE-2026-8090", "title": "Use-after-free in the DOM: Networking component", "priority": "High", "severity": "important", "cvss": 7.5, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-7322", "url": "https://patchblox.com/security/cve/CVE-2026-7322", "title": "Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00316, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8970", "url": "https://patchblox.com/security/cve/CVE-2026-8970", "title": "Privilege escalation in the Security component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00307, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12298", "url": "https://patchblox.com/security/cve/CVE-2026-12298", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00306, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12299", "url": "https://patchblox.com/security/cve/CVE-2026-12299", "title": "JIT miscompilation in the DOM: Core \u0026 HTML component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00306, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8963", "url": "https://patchblox.com/security/cve/CVE-2026-8963", "title": "Spoofing issue in the Web Speech component", "priority": "High", "cvss": 7.5, "epss": 0.00303, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8964", "url": "https://patchblox.com/security/cve/CVE-2026-8964", "title": "Spoofing issue in the Popup Blocker component", "priority": "High", "cvss": 7.5, "epss": 0.00302, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0890", "url": "https://patchblox.com/security/cve/CVE-2026-0890", "title": "Spoofing issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.003, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-7324", "url": "https://patchblox.com/security/cve/CVE-2026-7324", "title": "Memory safety bugs fixed in Thunderbird 150.0.1", "priority": "High", "cvss": 7.3, "epss": 0.003, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2798", "url": "https://patchblox.com/security/cve/CVE-2026-2798", "title": "Use-after-free in the DOM: Core \u0026 HTML component", "priority": "High", "cvss": 8.8, "epss": 0.00298, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16371", "url": "https://patchblox.com/security/cve/CVE-2026-16371", "title": "Privilege escalation in the DOM: Navigation component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00297, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6780", "url": "https://patchblox.com/security/cve/CVE-2026-6780", "title": "Denial-of-service in the Audio/Video: Playback component", "priority": "High", "cvss": 7.5, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6781", "url": "https://patchblox.com/security/cve/CVE-2026-6781", "title": "Denial-of-service in the Audio/Video: Playback component", "priority": "High", "cvss": 7.5, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16362", "url": "https://patchblox.com/security/cve/CVE-2026-16362", "title": "Use-after-free in the WebRTC: Audio/Video component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00292, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2803", "url": "https://patchblox.com/security/cve/CVE-2026-2803", "title": "Information disclosure, mitigation bypass in the Settings UI component", "priority": "High", "cvss": 7.5, "epss": 0.00292, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8969", "url": "https://patchblox.com/security/cve/CVE-2026-8969", "title": "Mitigation bypass in the DOM: Security component", "priority": "High", "cvss": 8.1, "epss": 0.0029, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12317", "url": "https://patchblox.com/security/cve/CVE-2026-12317", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "cvss": 7.5, "epss": 0.00288, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-9180", "url": "https://patchblox.com/security/cve/CVE-2025-9180", "title": "Same-origin policy bypass in the Graphics: Canvas2D component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00283, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92021", "url": "https://patchblox.com/security/cve/CVE-2026-92021", "title": "Use-after-free in the JavaScript Engine: JIT component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00282, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16365", "url": "https://patchblox.com/security/cve/CVE-2026-16365", "title": "Privilege escalation in the DOM: Workers component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16379", "url": "https://patchblox.com/security/cve/CVE-2026-16379", "title": "Privilege escalation in the DOM: Content Processes component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8038", "url": "https://patchblox.com/security/cve/CVE-2025-8038", "title": "CSP frame-src was not correctly enforced for paths", "priority": "High", "severity": "Medium", "cvss": 9.8, "epss": 0.00267, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-8037", "url": "https://patchblox.com/security/cve/CVE-2025-8037", "title": "Nameless cookies shadow secure cookies", "priority": "High", "severity": "Medium", "cvss": 9.1, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12318", "url": "https://patchblox.com/security/cve/CVE-2026-12318", "title": "Incorrect boundary conditions in the Libraries component in NSS", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12306", "url": "https://patchblox.com/security/cve/CVE-2026-12306", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12307", "url": "https://patchblox.com/security/cve/CVE-2026-12307", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12308", "url": "https://patchblox.com/security/cve/CVE-2026-12308", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-7321", "url": "https://patchblox.com/security/cve/CVE-2026-7321", "title": "Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.6, "epss": 0.00258, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2790", "url": "https://patchblox.com/security/cve/CVE-2026-2790", "title": "Same-origin policy bypass in the Networking: JAR component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6782", "url": "https://patchblox.com/security/cve/CVE-2026-6782", "title": "Information disclosure in the IP Protection component", "priority": "High", "cvss": 7.5, "epss": 0.00253, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12310", "url": "https://patchblox.com/security/cve/CVE-2026-12310", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12312", "url": "https://patchblox.com/security/cve/CVE-2026-12312", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12314", "url": "https://patchblox.com/security/cve/CVE-2026-12314", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12315", "url": "https://patchblox.com/security/cve/CVE-2026-12315", "title": "Mitigation bypass in the DOM: Security component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.1, "epss": 0.00251, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12302", "url": "https://patchblox.com/security/cve/CVE-2026-12302", "title": "Mitigation bypass in the DOM: Security component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00248, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16396", "url": "https://patchblox.com/security/cve/CVE-2026-16396", "title": "Privilege escalation in WebExtensions", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92014", "url": "https://patchblox.com/security/cve/CVE-2026-92014", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics component", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00239, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12309", "url": "https://patchblox.com/security/cve/CVE-2026-12309", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12325", "url": "https://patchblox.com/security/cve/CVE-2026-12325", "title": "Denial-of-service in the Graphics: ImageLib component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16398", "url": "https://patchblox.com/security/cve/CVE-2026-16398", "title": "Site isolation issue in the Graphics component", "priority": "High", "cvss": 7.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16399", "url": "https://patchblox.com/security/cve/CVE-2026-16399", "title": "Site isolation issue in the DOM: Navigation component", "priority": "High", "cvss": 7.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-3889", "url": "https://patchblox.com/security/cve/CVE-2026-3889", "title": "Spoofing issue in Thunderbird", "priority": "High", "severity": "IMPORTANT", "cvss": 8.2, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12324", "url": "https://patchblox.com/security/cve/CVE-2026-12324", "title": "Incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-14331", "url": "https://patchblox.com/security/cve/CVE-2025-14331", "title": "Same-origin policy bypass in the Request Handling component", "priority": "High", "severity": "Medium", "cvss": 7.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8950", "url": "https://patchblox.com/security/cve/CVE-2026-8950", "title": "Same-origin policy bypass in the Networking: HTTP component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.3, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12304", "url": "https://patchblox.com/security/cve/CVE-2026-12304", "title": "Same-origin policy bypass in the Networking: Cookies component", "priority": "High", "severity": "IMPORTANT", "cvss": 9.1, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12311", "url": "https://patchblox.com/security/cve/CVE-2026-12311", "title": "Information disclosure, sandbox escape in the Security: Process Sandboxing component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12313", "url": "https://patchblox.com/security/cve/CVE-2026-12313", "title": "Information disclosure, sandbox escape in the Security: Process Sandboxing component", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2804", "url": "https://patchblox.com/security/cve/CVE-2026-2804", "title": "Use-after-free in the JavaScript: WebAssembly component", "priority": "Routine", "cvss": 5.4, "epss": 0.0047, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16403", "url": "https://patchblox.com/security/cve/CVE-2026-16403", "title": "Spoofing issue in the Address Bar component", "priority": "Routine", "cvss": 6.5, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0888", "url": "https://patchblox.com/security/cve/CVE-2026-0888", "title": "Information disclosure in the XML component", "priority": "Routine", "cvss": 5.3, "epss": 0.0035, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-57962", "url": "https://patchblox.com/security/cve/CVE-2026-57962", "title": "Denial-of-service via malicious LDAP address-book server", "priority": "Routine", "severity": "medium", "cvss": 5.3, "epss": 0.0034, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-57963", "url": "https://patchblox.com/security/cve/CVE-2026-57963", "title": "Chat UI manipulation by injection", "priority": "Routine", "severity": "medium", "cvss": 6.5, "epss": 0.00306, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10530", "url": "https://patchblox.com/security/cve/CVE-2025-10530", "title": "Spoofing issue in the WebAuthn component in Firefox for Android", "priority": "Routine", "cvss": 6.5, "epss": 0.00297, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-10531", "url": "https://patchblox.com/security/cve/CVE-2025-10531", "title": "Mitigation bypass in the Web Compatibility: Tooling component", "priority": "Routine", "cvss": 5.4, "epss": 0.00276, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6778", "url": "https://patchblox.com/security/cve/CVE-2026-6778", "title": "Invalid pointer in the Audio/Video: Playback component", "priority": "Routine", "cvss": 5.3, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6755", "url": "https://patchblox.com/security/cve/CVE-2026-6755", "title": "Mitigation bypass in the DOM: postMessage component", "priority": "Routine", "cvss": 6.5, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12300", "url": "https://patchblox.com/security/cve/CVE-2026-12300", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "Routine", "cvss": 5.3, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12301", "url": "https://patchblox.com/security/cve/CVE-2026-12301", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "Routine", "cvss": 5.3, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-4728", "url": "https://patchblox.com/security/cve/CVE-2026-4728", "title": "Spoofing issue in the Privacy: Anti-Tracking component", "priority": "Routine", "cvss": 6.5, "epss": 0.00249, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6783", "url": "https://patchblox.com/security/cve/CVE-2026-6783", "title": "Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component", "priority": "Routine", "cvss": 5.3, "epss": 0.0023, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12303", "url": "https://patchblox.com/security/cve/CVE-2026-12303", "title": "Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component", "priority": "Routine", "cvss": 4.3, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12319", "url": "https://patchblox.com/security/cve/CVE-2026-12319", "title": "Denial-of-service in the Audio/Video: Playback component", "priority": "Routine", "cvss": 6.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6775", "url": "https://patchblox.com/security/cve/CVE-2026-6775", "title": "Incorrect boundary conditions in the WebRTC component", "priority": "Routine", "cvss": 5.3, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6779", "url": "https://patchblox.com/security/cve/CVE-2026-6779", "title": "Other issue in the JavaScript Engine component", "priority": "Routine", "cvss": 5.3, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12322", "url": "https://patchblox.com/security/cve/CVE-2026-12322", "title": "Clickjacking issue in the Widget: Gtk component", "priority": "Routine", "cvss": 5.4, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-8971", "url": "https://patchblox.com/security/cve/CVE-2026-8971", "title": "Same-origin policy bypass in the Networking: JAR component", "priority": "Routine", "cvss": 6.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12320", "url": "https://patchblox.com/security/cve/CVE-2026-12320", "title": "Information disclosure in the Password Manager component", "priority": "Routine", "cvss": 4.3, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-0818", "url": "https://patchblox.com/security/cve/CVE-2026-0818", "title": "CSS-based exfiltration of the content from partially encrypted emails when allowing remote content", "priority": "Routine", "severity": "Medium", "cvss": 4.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12323", "url": "https://patchblox.com/security/cve/CVE-2026-12323", "title": "Spoofing issue in the DOM: Core \u0026 HTML component", "priority": "Routine", "cvss": 5.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-2802", "url": "https://patchblox.com/security/cve/CVE-2026-2802", "title": "Race condition in the JavaScript: GC component", "priority": "Routine", "cvss": 4.2, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6777", "url": "https://patchblox.com/security/cve/CVE-2026-6777", "title": "Other issue in the Networking: DNS component", "priority": "Routine", "cvss": 5.3, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12321", "url": "https://patchblox.com/security/cve/CVE-2026-12321", "title": "JIT miscompilation in the JavaScript: WebAssembly component", "priority": "Routine", "cvss": 5.4, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-6774", "url": "https://patchblox.com/security/cve/CVE-2026-6774", "title": "Mitigation bypass in the DOM: Security component", "priority": "Routine", "cvss": 5.4, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-11T19:49:26Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }