Windows apps · Mozilla
Firefox Developer Edition (ca) security updates
The latest version of Firefox Developer Edition (ca) is 151.0, released May 13, 2026. Patch Radar has 18 security fixes for Firefox Developer Edition (ca), closing 400 CVEs. The newest security fix is Firefox Developer Edition (ca) 151.0, released May 13, 2026. 323 CVEs have no fix yet.
323 with no fix yet
Latest version
151.0
Released May 13, 2026
Security fixes
18
On record in Patch Radar
CVEs
400
Closed by those fixes
Exploited
0
Vendor report or CISA KEV
CVEs with no fix yet
| Priority | CVE | Title | Status |
|---|---|---|---|
| Urgent | CVE-2026-100758 | Sandbox escape in the DOM: Navigation component | no-fix |
| Urgent | CVE-2026-100760 | Sandbox escape in the Security: Process Sandboxing component | no-fix |
| Urgent | CVE-2026-100762 | Sandbox escape due to use-after-free in the DOM: Content Processes component | no-fix |
| Urgent | CVE-2026-100763 | Incorrect boundary conditions in the Graphics: WebGPU component | no-fix |
| Urgent | CVE-2026-100781 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component | no-fix |
| Urgent | CVE-2026-100786 | Sandbox escape due to use-after-free in the Graphics component | no-fix |
| Urgent | CVE-2026-100787 | Sandbox escape in the XUL component | no-fix |
| Urgent | CVE-2026-100788 | Invalid pointer in the JavaScript: WebAssembly component | no-fix |
| Urgent | CVE-2026-100794 | Sandbox escape due to incorrect boundary conditions in the Internationalization component | no-fix |
| Urgent | CVE-2026-100800 | Sandbox escape due to use-after-free in the Disability Access APIs component | no-fix |
| Urgent | CVE-2026-100804 | Sandbox escape due to use-after-free in the Preferences: Backend component | no-fix |
| Urgent | CVE-2026-100810 | Other issue in the DevTools component | no-fix |
| Urgent | CVE-2026-100811 | Sandbox escape due to use-after-free in the DOM: Core & HTML component | no-fix |
| Urgent | CVE-2026-100818 | Sandbox escape due to use-after-free in the Widget: Gtk component | no-fix |
| Urgent | CVE-2026-100819 | Sandbox escape due to incorrect boundary conditions in the XPCOM component | no-fix |
| Urgent | CVE-2026-100828 | Mitigation bypass in the Bookmarks & History component | no-fix |
| Urgent | CVE-2026-100829 | Mitigation bypass in the DOM: Security component | no-fix |
| Urgent | CVE-2026-106016 | Mitigation bypass in the File Handling component | no-fix |
| Urgent | CVE-2026-12293 | Use-after-free in the Graphics: WebGPU component | no-fix |
| Urgent | CVE-2026-12294 | Sandbox escape in the DOM: Workers component | no-fix |
| Urgent | CVE-2026-12295 | Sandbox escape in the DOM: Navigation component | no-fix |
| Urgent | CVE-2026-12296 | Sandbox escape in the Security: Process Sandboxing component | no-fix |
| Urgent | CVE-2026-12297 | Sandbox escape due to incorrect boundary conditions in the Networking component | no-fix |
| Urgent | CVE-2026-12304 | Same-origin policy bypass in the Networking: Cookies component | no-fix |
| Urgent | CVE-2026-12315 | Mitigation bypass in the DOM: Security component | no-fix |
| Urgent | CVE-2026-12316 | Mitigation bypass in the DOM: Security component | no-fix |
| Urgent | CVE-2026-16349 | Same-origin policy bypass in the DOM: Navigation component | no-fix |
| Urgent | CVE-2026-16350 | Incorrect boundary conditions in the Audio/Video: cubeb component | no-fix |
| Urgent | CVE-2026-16351 | Sandbox escape due to use-after-free in the DOM: Navigation component | no-fix |
| Urgent | CVE-2026-16352 | Sandbox escape due to use-after-free in the Disability Access APIs component | no-fix |
| Urgent | CVE-2026-16353 | Invalid pointer in the DOM: Bindings (WebIDL) component | no-fix |
| Urgent | CVE-2026-16355 | JIT miscompilation in the JavaScript Engine: JIT component | no-fix |
| Urgent | CVE-2026-16356 | Sandbox escape due to use-after-free in the Disability Access APIs component | no-fix |
| Urgent | CVE-2026-16357 | Incorrect boundary conditions in the Graphics component | no-fix |
| Urgent | CVE-2026-16358 | Site isolation issue in the Graphics: WebRender component | no-fix |
| Urgent | CVE-2026-16359 | Incorrect boundary conditions in the Audio/Video: GMP component | no-fix |
| Urgent | CVE-2026-16360 | Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153 | no-fix |
| Urgent | CVE-2026-16363 | JIT miscompilation in the JavaScript: WebAssembly component | no-fix |
| Urgent | CVE-2026-16364 | Incorrect boundary conditions in the Audio/Video: Playback component | no-fix |
| Urgent | CVE-2026-16367 | Sandbox escape due to invalid pointer in the Disability Access APIs component | no-fix |
| Urgent | CVE-2026-16368 | Incorrect boundary conditions in the JavaScript: WebAssembly component | no-fix |
| Urgent | CVE-2026-16369 | Integer overflow in the JavaScript: WebAssembly component | no-fix |
| Urgent | CVE-2026-16370 | Mitigation bypass in the DOM: Networking component | no-fix |
| Urgent | CVE-2026-16375 | Site isolation issue in the Networking: HTTP component | no-fix |
| Urgent | CVE-2026-16377 | Mitigation bypass in the PDF Viewer component | no-fix |
| Urgent | CVE-2026-16380 | Mitigation bypass in the Networking component | no-fix |
| Urgent | CVE-2026-16381 | Same-origin policy bypass in the Networking: DNS component | no-fix |
| Urgent | CVE-2026-16382 | Mitigation bypass in the DOM: Service Workers component | no-fix |
| Urgent | CVE-2026-16383 | Mitigation bypass in the DOM: Networking component | no-fix |
| Urgent | CVE-2026-16387 | Site isolation issue in the Networking component | no-fix |
| Urgent | CVE-2026-16388 | Sandbox escape in the DOM: Networking component | no-fix |
| Urgent | CVE-2026-16389 | Incorrect boundary conditions, integer overflow in the Libraries component in NSS | no-fix |
| Urgent | CVE-2026-16390 | Mitigation bypass in the Enterprise Policies component | no-fix |
| Urgent | CVE-2026-16392 | JIT miscompilation in the JavaScript Engine: JIT component | no-fix |
| Urgent | CVE-2026-16393 | Incorrect boundary conditions in the Graphics: WebGPU component | no-fix |
| Urgent | CVE-2026-16394 | Mitigation bypass in the DOM: Security component | no-fix |
| Urgent | CVE-2026-16395 | Integer overflow in the Audio/Video component | no-fix |
| Urgent | CVE-2026-16402 | Integer overflow in the Graphics: ImageLib component | no-fix |
| Urgent | CVE-2026-16406 | Mitigation bypass in the Networking component | no-fix |
| Urgent | CVE-2026-16407 | Mitigation bypass in the DOM: Service Workers component | no-fix |
| Urgent | CVE-2026-16408 | Integer overflow in the Audio/Video: Playback component | no-fix |
| Urgent | CVE-2026-16410 | JIT miscompilation in the JavaScript Engine: JIT component | no-fix |
| Urgent | CVE-2026-16411 | Memory safety bugs fixed in Thunderbird 153 | no-fix |
| Urgent | CVE-2026-16412 | Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153 | no-fix |
| Urgent | CVE-2026-74936 | Use-after-free in the JavaScript: WebAssembly component | no-fix |
| Urgent | CVE-2026-74940 | Use-after-free in the Graphics: Text component | no-fix |
| Urgent | CVE-2026-74943 | Use-after-free in the Graphics: ImageLib component | no-fix |
| Urgent | CVE-2026-74944 | Use-after-free in the DOM: Core & HTML component | no-fix |
| Urgent | CVE-2026-74956 | Same-origin policy bypass in the DOM: Service Workers component | no-fix |
| Urgent | CVE-2026-74959 | Mitigation bypass in the Storage: Cache API component | no-fix |
| Urgent | CVE-2026-74961 | Side-channel in the Web Audio component | no-fix |
| Urgent | CVE-2026-74964 | Integer overflow in the Graphics component | no-fix |
| Urgent | CVE-2026-74979 | Mitigation bypass in the Add-ons Manager component | no-fix |
| Urgent | CVE-2026-74985 | Privilege escalation in the Enterprise Policies component | no-fix |
| Urgent | CVE-2026-74986 | Site isolation issue in the CSS Parsing and Computation component | no-fix |
| Urgent | CVE-2026-74989 | Internally found bugs fixed in Thunderbird 154 | no-fix |
| Urgent | CVE-2026-75874 | Sandbox escape in the Remote Settings Client component | no-fix |
| Urgent | CVE-2026-84119 | Sandbox escape due to use-after-free in the DOM: Navigation component | no-fix |
| Urgent | CVE-2026-84121 | Sandbox escape due to use-after-free in the DOM: Security component | no-fix |
| Urgent | CVE-2026-84134 | Other issue in the Profile Backup component | no-fix |
| Urgent | CVE-2026-84142 | Internally found bugs fixed in Thunderbird 155 | no-fix |
| Urgent | CVE-2026-84143 | Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15 | no-fix |
| Urgent | CVE-2026-92018 | Sandbox escape in the DOM: Core & HTML component | no-fix |
| Urgent | CVE-2026-92032 | Sandbox escape due to invalid pointer in the Graphics component | no-fix |
| Urgent | CVE-2026-92034 | Site isolation issue in the Graphics component | no-fix |
| Urgent | CVE-2026-92036 | Incorrect boundary conditions in the Networking: HTTP component | no-fix |
| Urgent | CVE-2026-92037 | Incorrect boundary conditions in the DOM: Animation component | no-fix |
| Urgent | CVE-2026-92038 | Mitigation bypass in the Remote Settings Client component | no-fix |
| Urgent | CVE-2026-92041 | Mitigation bypass in the DOM: Networking component | no-fix |
| Urgent | CVE-2026-92045 | Sandbox escape due to incorrect boundary conditions in the WebRTC component | no-fix |
| Urgent | CVE-2026-92048 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component | no-fix |
| Urgent | CVE-2026-92050 | Sandbox escape due to race condition in the XPConnect component | no-fix |
| Urgent | CVE-2026-92051 | Spoofing issue due to invalid pointer in the Graphics component | no-fix |
| Urgent | CVE-2026-92057 | Mitigation bypass in the Enterprise Policies component | no-fix |
| Urgent | CVE-2026-92059 | Incorrect boundary conditions in the DOM: Editor component | no-fix |
| Urgent | CVE-2026-92061 | Incorrect boundary conditions in the Security: Process Sandboxing component | no-fix |
| Urgent | CVE-2026-92066 | Sandbox escape in the Profile Backup component | no-fix |
| Urgent | CVE-2026-92071 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component | no-fix |
| Urgent | CVE-2026-92075 | Mitigation bypass in the Networking component | no-fix |
| Urgent | CVE-2026-92079 | Mitigation bypass in the Widget: Win32 component | no-fix |
| High | CVE-2026-100757 | Use-after-free in the Widget component | no-fix |
| High | CVE-2026-100759 | Uninitialized memory in the Storage: Quota Manager component | no-fix |
| High | CVE-2026-100761 | Privilege escalation due to use-after-free in the Graphics: WebGPU component | no-fix |
| High | CVE-2026-100764 | Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component | no-fix |
| High | CVE-2026-100765 | Use-after-free in the JavaScript: WebAssembly component | no-fix |
| High | CVE-2026-100766 | Information disclosure in the Networking: JAR component | no-fix |
| High | CVE-2026-100768 | Use-after-free in the Graphics: WebGPU component | no-fix |
| High | CVE-2026-100779 | Use-after-free in the XSLT component | no-fix |
| High | CVE-2026-100780 | Use-after-free in the DOM: Core & HTML component | no-fix |
| High | CVE-2026-100782 | Privilege escalation due to incorrect boundary conditions in the Graphics component | no-fix |
| High | CVE-2026-100783 | Uninitialized memory in the Audio/Video component | no-fix |
| High | CVE-2026-100784 | Use-after-free in the Layout: Text and Fonts component | no-fix |
| High | CVE-2026-100785 | Use-after-free in the DOM: Core & HTML component | no-fix |
| High | CVE-2026-100789 | Use-after-free in the Graphics: Canvas2D component | no-fix |
| High | CVE-2026-100790 | Use-after-free in the XSLT component | no-fix |
| High | CVE-2026-100791 | Use-after-free in the DOM: Core & HTML component | no-fix |
| High | CVE-2026-100792 | JIT miscompilation in the JavaScript: WebAssembly component | no-fix |
| High | CVE-2026-100796 | Use-after-free in the JavaScript: WebAssembly component | no-fix |
| High | CVE-2026-100797 | Privilege escalation due to use-after-free in the Graphics: WebRender component | no-fix |
| High | CVE-2026-100798 | Cryptography misuse in Storage: Quota Manager component | no-fix |
| High | CVE-2026-100801 | Privilege escalation in the DLL Services component | no-fix |
| High | CVE-2026-100803 | Same-origin policy bypass in the WebExtensions component | no-fix |
| High | CVE-2026-100805 | Race condition, use-after-free in the Audio/Video component | no-fix |
| High | CVE-2026-100807 | Privilege escalation in the DOM: Service Workers component | no-fix |
| High | CVE-2026-100808 | Mitigation bypass in the DOM: Service Workers component | no-fix |
| High | CVE-2026-100809 | Same-origin policy bypass in the DevTools component | no-fix |
| High | CVE-2026-100813 | Invalid pointer in the JavaScript Engine: JIT component | no-fix |
| High | CVE-2026-100814 | Incorrect boundary conditions in the JavaScript Engine: JIT component | no-fix |
| High | CVE-2026-100815 | Use-after-free in the CSS Parsing and Computation component | no-fix |
| High | CVE-2026-100816 | Site isolation issue in the DOM: Networking component | no-fix |
| High | CVE-2026-100820 | Privilege escalation in the Address Bar component | no-fix |
| High | CVE-2026-100821 | Site isolation issue in the Panning and Zooming component | no-fix |
| High | CVE-2026-100824 | Privilege escalation in the Places component | no-fix |
| High | CVE-2026-100825 | Use-after-free in the JavaScript Engine: JIT component | no-fix |
| High | CVE-2026-100830 | Mitigation bypass in the DOM: Navigation component | no-fix |
| High | CVE-2026-100831 | Use-after-free in the DOM: UI Events & Focus Handling component | no-fix |
| High | CVE-2026-100832 | Use-after-free in the Graphics: Canvas2D component | no-fix |
| High | CVE-2026-10701 | Incorrect boundary conditions in the Graphics: Text component | no-fix |
| High | CVE-2026-12289 | Privilege escalation in the Graphics: WebRender component | no-fix |
| High | CVE-2026-12290 | Memory safety bug fixed in Thunderbird 152 | no-fix |
| High | CVE-2026-12291 | Use-after-free in the Networking: HTTP component | no-fix |
| High | CVE-2026-12292 | Incorrect boundary conditions in the Web Audio component | no-fix |
| High | CVE-2026-12298 | Memory safety bug fixed in Thunderbird 152 | no-fix |
| High | CVE-2026-12299 | JIT miscompilation in the DOM: Core & HTML component | no-fix |
| High | CVE-2026-12302 | Mitigation bypass in the DOM: Security component | no-fix |
| High | CVE-2026-12305 | Memory safety bug fixed in Thunderbird 152 | no-fix |
| High | CVE-2026-12306 | Memory safety bug fixed in Thunderbird 152 | no-fix |
| High | CVE-2026-12307 | Memory safety bug fixed in Thunderbird 152 | no-fix |
| High | CVE-2026-12308 | Memory safety bug fixed in Thunderbird 152 | no-fix |
| High | CVE-2026-12309 | Memory safety bug fixed in Thunderbird 152 | no-fix |
| High | CVE-2026-12310 | Memory safety bug fixed in Thunderbird 152 | no-fix |
| High | CVE-2026-12311 | Information disclosure, sandbox escape in the Security: Process Sandboxing component | no-fix |
| High | CVE-2026-12312 | Memory safety bug fixed in Thunderbird 152 | no-fix |
| High | CVE-2026-12313 | Information disclosure, sandbox escape in the Security: Process Sandboxing component | no-fix |
| High | CVE-2026-12314 | Memory safety bug fixed in Thunderbird 152 | no-fix |
| High | CVE-2026-12317 | Memory safety bug fixed in Thunderbird 152 | no-fix |
| High | CVE-2026-12318 | Incorrect boundary conditions in the Libraries component in NSS | no-fix |
| High | CVE-2026-12324 | Incorrect boundary conditions in the Graphics: CanvasWebGL component | no-fix |
| High | CVE-2026-12325 | Denial-of-service in the Graphics: ImageLib component | no-fix |
| High | CVE-2026-12326 | Memory safety bugs fixed in Firefox 152 and Thunderbird 152 | no-fix |
| High | CVE-2026-12327 | Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 | no-fix |
| High | CVE-2026-12328 | Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 | no-fix |
| High | CVE-2026-15718 | Invalid pointer in the JavaScript: WebAssembly component | no-fix |
| High | CVE-2026-15719 | Site isolation issue in the DOM: Navigation component | no-fix |
| High | CVE-2026-16354 | Information disclosure in the Graphics: ImageLib component | no-fix |
| High | CVE-2026-16362 | Use-after-free in the WebRTC: Audio/Video component | no-fix |
| High | CVE-2026-16365 | Privilege escalation in the DOM: Workers component | no-fix |
| High | CVE-2026-16366 | Privilege escalation in the DOM: Navigation component | no-fix |
| High | CVE-2026-16371 | Privilege escalation in the DOM: Navigation component | no-fix |
| High | CVE-2026-16372 | Privilege escalation in the DOM: Content Processes component | no-fix |
| High | CVE-2026-16374 | Information disclosure in the Framework component in DevTools | no-fix |
| High | CVE-2026-16376 | Denial-of-service in the Graphics: WebGPU component | no-fix |
| High | CVE-2026-16378 | Other issue in the DOM: Copy & Paste and Drag & Drop component | no-fix |
| High | CVE-2026-16379 | Privilege escalation in the DOM: Content Processes component | no-fix |
| High | CVE-2026-16384 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component | no-fix |
| High | CVE-2026-16385 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component | no-fix |
| High | CVE-2026-16386 | Information disclosure due to uninitialized memory in the Graphics: WebGPU component | no-fix |
| High | CVE-2026-16391 | Information disclosure in the Storage: IndexedDB component | no-fix |
| High | CVE-2026-16396 | Privilege escalation in WebExtensions | no-fix |
| High | CVE-2026-16398 | Site isolation issue in the Graphics component | no-fix |
| High | CVE-2026-16399 | Site isolation issue in the DOM: Navigation component | no-fix |
| High | CVE-2026-16400 | Information disclosure in the DOM: Security component | no-fix |
| High | CVE-2026-16401 | Privilege escalation in the Data Loss Prevention component | no-fix |
| High | CVE-2026-16405 | Information disclosure in the Networking: WebSockets component | no-fix |
| High | CVE-2026-16409 | Invalid pointer in the Security: PSM component | no-fix |
| High | CVE-2026-74934 | Site isolation issue in the Graphics: CanvasWebGL component | no-fix |
| High | CVE-2026-74935 | Privilege escalation in the DOM: Networking component | no-fix |
| High | CVE-2026-74937 | Use-after-free in the JavaScript: GC component | no-fix |
| High | CVE-2026-74938 | Mitigation bypass in the JavaScript: GC component | no-fix |
| High | CVE-2026-74939 | Privilege escalation in the DOM: Navigation component | no-fix |
| High | CVE-2026-74941 | Privilege escalation in the Graphics: CanvasWebGL component | no-fix |
| High | CVE-2026-74942 | Privilege escalation in the Remote Settings Client component | no-fix |
| High | CVE-2026-74945 | Information disclosure in the Graphics: Text component | no-fix |
| High | CVE-2026-74946 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component | no-fix |
| High | CVE-2026-74947 | Privilege escalation due to invalid pointer in the Graphics component | no-fix |
| High | CVE-2026-74948 | Information disclosure in the Graphics component | no-fix |
| High | CVE-2026-74949 | Privilege escalation due to use-after-free in the Graphics: Canvas2D component | no-fix |
| High | CVE-2026-74950 | Privilege escalation in the Downloads API component | no-fix |
| High | CVE-2026-74952 | Privilege escalation in the Application Update component | no-fix |
| High | CVE-2026-74953 | Privilege escalation in the Networking: Cookies component | no-fix |
Security fixes, newest first
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.