Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

Mozilla Firefox

2217 vulnérabilités publiées citent ce produit. Les 200 plus récentes sont listées.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2026-118027corrigé en 115.44Frame poisoning in the Layout component0.1 %
CVE-2026-118026corrigé en 159Invalid pointer in the JavaScript: GC component0.1 %
CVE-2026-118025corrigé en 159Other issue in the SVG component0.1 %
CVE-2026-118024corrigé en 159Use-after-free in the Graphics: Text component0.1 %
CVE-2026-118023corrigé en 159Sandbox escape due to use-after-free in the Graphics: WebRender component0.1 %
CVE-2026-118022corrigé en 159Sandbox escape due to use-after-free in the Disability Access APIs component0.1 %
CVE-2026-118021corrigé en 159Sandbox escape due to use-after-free in the XPCOM component0.1 %
CVE-2026-118020corrigé en 159Use-after-free in the Layout component0.1 %
CVE-2026-118019corrigé en 159Race condition, use-after-free in the DOM: File component0.1 %
CVE-2026-118018corrigé en 159Spoofing issue in the Downloads component in Firefox for Android0.1 %
CVE-2026-118017corrigé en 159Use-after-free in the SVG component0.1 %
CVE-2026-118016corrigé en 159Use-after-free in the DOM: Core & HTML component0.1 %
CVE-2026-118015corrigé en 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-118014corrigé en 159Use-after-free in the JavaScript Engine: JIT component0.2 %
CVE-2026-118013corrigé en 159Use-after-free in the Layout: Images, Video, and HTML Frames component0.2 %
CVE-2026-118012corrigé en 159Use-after-free in the DOM: Animation component0.2 %
CVE-2026-118011corrigé en 159Frame poisoning in the CSS Parsing and Computation component0.2 %
CVE-2026-118010corrigé en 159Use-after-free in the Disability Access APIs component0.2 %
CVE-2026-118009corrigé en 159Integer overflow, use-after-free in the Graphics: Text component0.2 %
CVE-2026-118008corrigé en 159Privilege escalation in the DOM: Navigation componentHIGH 8.80.4 %
CVE-2026-118007corrigé en 159Use-after-free in the JavaScript: GC component0.2 %
CVE-2026-118006corrigé en 159Privilege escalation due to use-after-free in the WebRTC: Signaling component0.2 %
CVE-2026-118005corrigé en 159Use-after-free in the WebRTC: Signaling component0.2 %
CVE-2026-118004corrigé en 153.6, 159Incorrect boundary conditions in the CSS Transitions and Animations component0.2 %
CVE-2026-118003corrigé en 153.6, 159Information disclosure in the Networking: DNS component0.2 %
CVE-2026-118002corrigé en 153.6, 159Information disclosure due to race condition in the Networking component0.2 %
CVE-2026-118000corrigé en 153.6, 159Information disclosure in the Networking: HTTP component0.2 %
CVE-2026-117999corrigé en 153.6, 159Race condition in the IPC component0.2 %
CVE-2026-117998corrigé en 153.6, 159Mitigation bypass in the DOM: Push Subscriptions component0.2 %
CVE-2026-117997corrigé en 153.6, 159Sandbox escape due to use-after-free in the Widget component0.2 %
CVE-2026-117996corrigé en 153.6, 159Incorrect boundary conditions in the WebRTC component0.2 %
CVE-2026-117995corrigé en 153.6, 159Privilege escalation in the DOM: UI Events & Focus Handling component0.2 %
CVE-2026-117994corrigé en 153.6, 159Use-after-free in the JavaScript: GC component0.2 %
CVE-2026-117993corrigé en 153.6, 159Integer overflow in the Graphics: Text component0.2 %
CVE-2026-117992corrigé en 115.44, 153.6, 159Information disclosure in the CSS Parsing and Computation component0.2 %
CVE-2026-117991corrigé en 153.6, 159Incorrect boundary conditions in the Layout: Text and Fonts component0.2 %
CVE-2026-117990corrigé en 153.6, 159Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component0.2 %
CVE-2026-117989corrigé en 153.6, 159Use-after-free in the Graphics component0.2 %
CVE-2026-117988corrigé en 153.6, 159Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component0.2 %
CVE-2026-117987corrigé en 153.6, 159Use-after-free in the Graphics component0.2 %
CVE-2026-117986corrigé en 153.6, 159Use-after-free in the Graphics component0.2 %
CVE-2026-117985corrigé en 153.6, 159Sandbox escape due to use-after-free in the Graphics component0.2 %
CVE-2026-117984corrigé en 153.6, 159Incorrect boundary conditions in the Layout: Scrolling and Overflow component0.2 %
CVE-2026-117983corrigé en 153.6, 159Use-after-free in the Graphics component0.2 %
CVE-2026-117982corrigé en 153.6, 159Invalid pointer in the JavaScript Engine: JIT component0.2 %
CVE-2026-117981corrigé en 153.6, 159Privilege escalation in the Toolkit component0.2 %
CVE-2026-117980corrigé en 153.6, 159Use-after-free in the Graphics component0.2 %
CVE-2026-117979corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the Graphics: WebRender component0.2 %
CVE-2026-117978corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the Graphics component0.2 %
CVE-2026-117977corrigé en 153.6, 159Other issue in the Console component0.2 %
CVE-2026-117976corrigé en 153.6, 159Site isolation issue in the DOM: Navigation component0.2 %
CVE-2026-117975corrigé en 153.6, 159Sandbox escape due to invalid pointer in the Graphics: WebRender component0.2 %
CVE-2026-117974corrigé en 115.44, 153.6, 159Use-after-free in the XML component0.2 %
CVE-2026-117973corrigé en 153.6, 159Use-after-free in the Networking: DNS component0.2 %
CVE-2026-117972corrigé en 153.6, 159Use-after-free in the Graphics component0.2 %
CVE-2026-117971corrigé en 115.44, 153.6, 159Sandbox escape due to use-after-free in the Print Preview component0.2 %
CVE-2026-117970corrigé en 153.6, 159Race condition in the Disability Access APIs component0.2 %
CVE-2026-117969corrigé en 153.6, 159Invalid pointer in the JavaScript Engine: JIT component0.2 %
CVE-2026-117968corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117967corrigé en 153.6, 159Mitigation bypass in the DOM: Security component0.2 %
CVE-2026-117966corrigé en 115.44, 153.6, 159Site isolation issue in the Networking: HTTP component0.2 %
CVE-2026-117965corrigé en 153.6, 159Same-origin policy bypass in the Address Bar component0.2 %
CVE-2026-117964corrigé en 153.6, 159Use-after-free in the Panning and Zooming component0.2 %
CVE-2026-117963corrigé en 153.6, 159Incorrect boundary conditions in the DOM: Service Workers component0.2 %
CVE-2026-117962corrigé en 153.6, 159Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component0.2 %
CVE-2026-117961corrigé en 153.6, 159Incorrect boundary conditions in the Layout: Text and Fonts component0.2 %
CVE-2026-117960corrigé en 153.6, 159Spoofing issue in the DOM: Core & HTML component0.2 %
CVE-2026-117959corrigé en 153.6, 159Site isolation issue in the DOM: Service Workers component0.2 %
CVE-2026-117958corrigé en 153.6, 159Site isolation issue in the Networking: HTTP component0.2 %
CVE-2026-117957corrigé en 153.6, 159Cryptographic issue in the WebRTC: Networking component0.2 %
CVE-2026-117956corrigé en 153.6, 159Invalid pointer in the Nimbus Desktop Client component0.2 %
CVE-2026-117955corrigé en 153.6, 159JIT miscompilation in the JavaScript: WebAssembly component0.2 %
CVE-2026-117954corrigé en 115.44, 153.6, 159Use-after-free in the Layout: Positioned component0.2 %
CVE-2026-117953corrigé en 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117952corrigé en 115.44, 153.6, 159Uninitialized memory in the Networking component0.2 %
CVE-2026-117951corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117950corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the DOM: Core & HTML component0.2 %
CVE-2026-117949corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117948corrigé en 115.44, 153.6, 159Use-after-free in the SVG component0.2 %
CVE-2026-117947corrigé en 153.6, 159Use-after-free in the XML component0.2 %
CVE-2026-117946corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the JavaScript Engine component0.2 %
CVE-2026-117945corrigé en 153.6, 159Incorrect boundary conditions in the XML component0.2 %
CVE-2026-117944corrigé en 115.44, 153.6, 159Use-after-free in the Layout component0.2 %
CVE-2026-117943corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117942corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the JavaScript Engine: JIT component0.2 %
CVE-2026-117941corrigé en 115.44, 153.6, 159Use-after-free in the DOM: CSS Object Model component0.2 %
CVE-2026-117940corrigé en 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117939corrigé en 115.44, 153.6, 159Use-after-free in the XML component0.2 %
CVE-2026-117938corrigé en 115.44, 153.6, 159Use-after-free in the Layout component0.2 %
CVE-2026-117937corrigé en 115.44, 153.6, 159Invalid pointer in the JavaScript Engine component0.2 %
CVE-2026-117936corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117935corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Bindings (WebIDL) component0.2 %
CVE-2026-117934corrigé en 115.44, 153.6, 159Use-after-free in the Layout component0.2 %
CVE-2026-117933corrigé en 153.6, 159Frame poisoning in the CSS Parsing and Computation component0.2 %
CVE-2026-117932corrigé en 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117931corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Events component0.2 %
CVE-2026-117930corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Bindings (WebIDL) component0.2 %
CVE-2026-117929corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117928corrigé en 153.6, 159Same-origin policy bypass in the CSS Parsing and Computation component0.2 %
CVE-2026-117927corrigé en 115.44, 153.6, 159Use-after-free in the SVG component0.2 %
CVE-2026-117926corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the SVG component0.2 %
CVE-2026-117925corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117924corrigé en 115.44, 153.6, 159Use-after-free in the XSLT component0.2 %
CVE-2026-117923corrigé en 115.44, 153.6, 159Use-after-free in the Audio/Video component0.2 %
CVE-2026-117922corrigé en 115.44, 153.6, 159Use-after-free in the Networking: WebSockets component0.2 %
CVE-2026-117921corrigé en 115.44, 153.6, 159Use-after-free in the CSS Parsing and Computation component0.2 %
CVE-2026-117920corrigé en 153.6, 159Use-after-free in the DOM: HTML Parser component0.2 %
CVE-2026-117919corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117918corrigé en 115.44, 153.6, 159Use-after-free in the Graphics: Canvas2D component0.2 %
CVE-2026-117917corrigé en 115.44, 153.6, 159Invalid pointer in the Graphics: WebRender component0.2 %
CVE-2026-117916corrigé en 153.6, 159Use-after-free in the XSLT component0.2 %
CVE-2026-117915corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the Layout: Block and Inline component0.2 %
CVE-2026-117914corrigé en 115.44, 153.6, 159Use-after-free in the SVG component0.2 %
CVE-2026-117913corrigé en 153.6, 159Use-after-free in the SVG component0.2 %
CVE-2026-117912corrigé en 115.44, 153.6, 159Same-origin policy bypass in the CSS Parsing and Computation component0.2 %
CVE-2026-117911corrigé en 115.44, 153.6, 159Use-after-free in the Audio/Video: Playback component0.2 %
CVE-2026-117910corrigé en 153.6, 159Invalid pointer in the JavaScript Engine component0.2 %
CVE-2026-117909corrigé en 153.6, 159Use-after-free in the JavaScript: GC component0.2 %
CVE-2026-117908corrigé en 115.44, 153.6, 159Use-after-free in the Graphics: ImageLib component0.2 %
CVE-2026-117907corrigé en 115.44, 153.6, 159Use-after-free in the Networking component0.2 %
CVE-2026-117906corrigé en 115.44, 153.6, 159Use-after-free in the CSS Parsing and Computation component0.2 %
CVE-2026-117905corrigé en 115.44, 153.6, 159Use-after-free in the Audio/Video: Playback component0.2 %
CVE-2026-117904corrigé en 153.6, 159Use-after-free in the JavaScript: GC component0.2 %
CVE-2026-117903corrigé en 115.44, 153.6, 159Use-after-free in the Audio/Video component0.2 %
CVE-2026-117902corrigé en 153.6, 159Use-after-free in the Layout: Text and Fonts component0.2 %
CVE-2026-117901corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117900corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Editor component0.2 %
CVE-2026-117899corrigé en 115.44, 153.6, 159Use-after-free in the Networking: HTTP component0.2 %
CVE-2026-117898corrigé en 153.6, 159Use-after-free in the JavaScript Engine: JIT component0.2 %
CVE-2026-117897corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the Layout: Tables component0.2 %
CVE-2026-117896corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117895corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117894corrigé en 153.6, 159Incorrect boundary conditions in the WebRTC: Signaling component0.2 %
CVE-2026-117893corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the Security: PSM component0.2 %
CVE-2026-117892corrigé en 115.44, 153.6, 159Privilege escalation due to use-after-free in the WebRTC: Networking component0.2 %
CVE-2026-117891corrigé en 115.44, 153.6, 159Use-after-free in the JavaScript Engine: JIT component0.2 %
CVE-2026-117890corrigé en 153.6, 159JIT miscompilation in the JavaScript Engine: JIT component0.2 %
CVE-2026-117889corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the JavaScript Engine component0.2 %
CVE-2026-117888corrigé en 153.6, 159Uninitialized memory in the Graphics: Canvas2D component0.2 %
CVE-2026-117887corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117886corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the Graphics: Text component0.2 %
CVE-2026-117885corrigé en 153.6, 159Use-after-free in the Layout: Grid component0.2 %
CVE-2026-117884corrigé en 115.44, 153.6, 159Use-after-free in the Networking component0.2 %
CVE-2026-117883corrigé en 115.44, 153.6, 159Use-after-free in the DOM: HTML Parser component0.2 %
CVE-2026-117882corrigé en 115.44, 153.6, 159Use-after-free in the Layout component0.2 %
CVE-2026-117881corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117880corrigé en 115.44, 153.6, 159Use-after-free in the XML component0.2 %
CVE-2026-117879corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the Layout: Tables component0.2 %
CVE-2026-117878corrigé en 115.44, 153.6, 159Other issue, use-after-free in the Storage: IndexedDB component0.2 %
CVE-2026-117877corrigé en 153.6, 159Use-after-free in the Layout: Text and Fonts component0.2 %
CVE-2026-117876corrigé en 115.44, 153.6, 159Use-after-free in the Layout: Text and Fonts component0.2 %
CVE-2026-117875corrigé en 153.6, 159Use-after-free in the Layout: Scrolling and Overflow component0.2 %
CVE-2026-117874corrigé en 115.44, 153.6, 159Use-after-free in the Internationalization component0.2 %
CVE-2026-117873corrigé en 115.44, 153.6, 159Incorrect boundary conditions in the Audio/Video: Playback component0.2 %
CVE-2026-117872corrigé en 115.44, 153.6, 159Use-after-free in the JavaScript: Standard Library component0.2 %
CVE-2026-117871corrigé en 153.6, 159Invalid pointer in the Graphics component0.2 %
CVE-2026-117870corrigé en 115.44, 153.6, 159Use-after-free in the JavaScript Engine component0.2 %
CVE-2026-117869corrigé en 115.44, 153.6, 159Use-after-free in the DOM: Core & HTML component0.2 %
CVE-2026-117868corrigé en 115.44, 153.6, 159Sandbox escape in the DOM: Networking component0.2 %
CVE-2026-117867corrigé en 115.44, 153.6, 159Use-after-free in the Layout component0.2 %
CVE-2026-117866corrigé en 115.44, 153.6, 159Privilege escalation due to use-after-free in the Graphics: Canvas2D component0.2 %
CVE-2026-117865corrigé en 153.6, 159Use-after-free in the JavaScript: GC component0.2 %
CVE-2026-117864corrigé en 153.6, 159Sandbox escape in the Form Manager component0.2 %
CVE-2026-117863corrigé en 115.44, 153.6, 159Information disclosure due to uninitialized memory in the Audio/Video component0.2 %
CVE-2026-117862corrigé en 115.44, 153.6, 159Privilege escalation due to incorrect boundary conditions in the Networking component0.2 %
CVE-2026-117861corrigé en 153.6, 159Sandbox escape in the DOM: Navigation component0.2 %
CVE-2026-117860corrigé en 153.6, 159Same-origin policy bypass in the DOM: Navigation component0.2 %
CVE-2026-113401corrigé en 158.0.1Denial-of-service in the PDF Viewer componentMEDIUM 6.50.3 %
CVE-2026-113400corrigé en 158.0.1Uninitialized memory in the Audio/Video: cubeb componentMEDIUM 5.40.3 %
CVE-2026-113470corrigé en 115.43.1, 153.5.1, 158.0.1, …Cryptographic issue in the Security Block-lists, Allow-lists, and other State componentMEDIUM 5.40.5 %
CVE-2026-113399corrigé en 158.0.1Incorrect boundary conditions in the SVG component0.2 %
CVE-2026-109783corrigé en 153.5Mitigation bypass in the File Handling componentHIGH 8.30.3 %
CVE-2026-109782corrigé en 153.5Mitigation bypass in the File Handling componentHIGH 8.30.3 %
CVE-2026-109781corrigé en 153.5, 158Denial-of-service in the Printing: Output componentMEDIUM 6.50.2 %
CVE-2026-109780corrigé en 158Mitigation bypass in the DOM: Core & HTML componentCRITICAL 9.80.4 %
CVE-2026-109779corrigé en 158Race condition in the Networking: DNS componentMEDIUM 4.20.1 %
CVE-2026-109778corrigé en 153.5, 158Privilege escalation in the WebExtensions componentHIGH 8.80.3 %
CVE-2026-109777corrigé en 153.5, 158Information disclosure in the Storage: IndexedDB componentMEDIUM 4.30.2 %
CVE-2026-109776corrigé en 153.5, 158Race condition in the XPCOM componentMEDIUM 4.20.1 %
CVE-2026-109775corrigé en 153.5, 158Denial-of-service in the WebRTC componentMEDIUM 6.50.2 %
CVE-2026-109774corrigé en 158Invalid pointer, undefined behavior in the DOM: Notifications componentCRITICAL 9.80.3 %
CVE-2026-109773corrigé en 158Denial-of-service in the Sync componentMEDIUM 6.50.2 %
CVE-2026-109772corrigé en 158Same-origin policy bypass in the DevTools componentCRITICAL 9.10.2 %
CVE-2026-109771corrigé en 158Information disclosure in the WebRTC: Networking componentMEDIUM 4.30.2 %
CVE-2026-109770corrigé en 153.5, 158Spoofing issue in the DOM: Web Serial componentMEDIUM 6.10.2 %
CVE-2026-109769corrigé en 158Information disclosure in the Networking: Cache componentMEDIUM 4.30.2 %
CVE-2026-109768corrigé en 158Denial-of-service in the Site Reports componentMEDIUM 6.50.2 %
CVE-2026-109767corrigé en 153.5, 158Information disclosure in the Networking componentMEDIUM 4.30.2 %
CVE-2026-109766corrigé en 153.5, 158Mitigation bypass in the Enterprise Policies componentHIGH 8.10.3 %
CVE-2026-109765corrigé en 153.5, 158Race condition, use-after-free in the Graphics: Text componentMEDIUM 4.20.2 %
CVE-2026-109764corrigé en 153.5, 158Mitigation bypass in the Enterprise Policies componentMEDIUM 5.40.2 %
CVE-2026-109763corrigé en 153.5, 158Mitigation bypass in the File Handling component0.2 %
CVE-2026-109762corrigé en 153.5, 158Incorrect boundary conditions in the SVG componentHIGH 8.80.3 %
CVE-2026-109761corrigé en 158Use-after-free in the JavaScript: WebAssembly componentMEDIUM 5.40.2 %
CVE-2026-109760corrigé en 153.5, 158Mitigation bypass in the Networking: HTTP componentHIGH 8.10.3 %
CVE-2026-109759corrigé en 153.5, 158Site isolation issue in the Networking componentHIGH 8.10.2 %
CVE-2026-109757corrigé en 153.5, 158Sandbox escape due to race condition in the Networking componentHIGH 8.30.3 %
CVE-2026-109756corrigé en 153.5, 158Privilege escalation in the DOM: Navigation componentHIGH 8.80.3 %
CVE-2026-109755corrigé en 158Sandbox escape in the DOM: Content Processes componentCRITICAL 9.60.3 %
CVE-2026-109754corrigé en 153.5, 158Incorrect boundary conditions in the DOM: Editor componentHIGH 8.10.3 %