CVE Database
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
| CVE ID | Severity | Score | Description | Published | |
|---|---|---|---|---|---|
| CVE-2026-109757 | HIGH | 8.3 | Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109755 | CRITICAL | 9.6 | Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 | |
| CVE-2026-109754 | HIGH | 8.1 | Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109753 | HIGH | 8.1 | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109750 | CRITICAL | 9.6 | Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 | |
| CVE-2026-109747 | HIGH | 7.3 | Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 | |
| CVE-2026-109746 | HIGH | 7.3 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 | |
| CVE-2026-109745 | CRITICAL | 9.6 | Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109744 | HIGH | 8.1 | Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109743 | HIGH | 8.8 | Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109740 | CRITICAL | 9.6 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109739 | HIGH | 8.8 | Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 | |
| CVE-2026-109737 | HIGH | 8.1 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109736 | HIGH | 8.1 | Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109734 | HIGH | 8.1 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109733 | HIGH | 8.1 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109731 | MEDIUM | 5.4 | Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109730 | HIGH | 8.8 | Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109723 | MEDIUM | 5.4 | Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109721 | MEDIUM | 5.4 | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109720 | HIGH | 7.1 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109714 | MEDIUM | 5.4 | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 | |
| CVE-2026-109708 | CRITICAL | 9.6 | Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109704 | HIGH | 8.8 | Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 | |
| CVE-2026-109407 | LOW | 3.1 | A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redemption. Such manipulation of the argument couponId leads to race condition. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is assessed as difficult. The vendor deleted the GitHub issue for this vulnerability without any explanation. | Oct 13, 2026 |