Just published.
The newest CVEs, straight from CVE.org and NVD.
-
CVE-2026-124952
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.
-
CVE-2026-124950
Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124947
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124949
Other issue in the SVG component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124945
Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124946
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124943
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124944
Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124937
Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124928
Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124936
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124923
Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124925
Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124920
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124921
Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124908
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124911
Clickjacking issue in the Autofill component in Firefox for Android. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124904
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124878
Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124900
Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124867
Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124871
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124852
Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160.
-
CVE-2026-124948
Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124951
Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124941
Information disclosure in the Security: RLBox component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124942
Invalid pointer in the DOM: Streams component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124939
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124940
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124935
Undefined behavior in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124938
Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124934
Spoofing issue in the Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124932
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124933
Sandbox escape in the Console component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124931
Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124929
Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124930
Information disclosure in the Address Bar component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124926
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124927
Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124924
Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124922
Use-after-free in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124918
Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124919
Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124917
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124914
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124915
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124912
Spoofing issue in the DOM: Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124913
Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124910
Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
-
CVE-2026-124907
Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
The newest published CVE records from CVE.org and NVD, refreshed every few minutes, with severity, exploit odds and fix status.