MGASA-2026-0325: firefox Mageia
CVSS: UnknownPublished
Published 07-08-2026Last modified 07-08-2026
Vulnerability summary
MGASA-2026-0325 is a vulnerability in firefox Mageia with no CVSS score yet.
CVSS score
Not scored
010
No CVSS score recordedEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 32 · Downstream 0CVE-2026-15718CVE-2026-15719CVE-2026-16349CVE-2026-16350CVE-2026-16351CVE-2026-16352CVE-2026-16353CVE-2026-16354CVE-2026-16355CVE-2026-16356CVE-2026-16357CVE-2026-16358CVE-2026-16359CVE-2026-16360CVE-2026-16361CVE-2026-16362CVE-2026-16363CVE-2026-16368CVE-2026-16369CVE-2026-16371CVE-2026-16374CVE-2026-16375CVE-2026-16377CVE-2026-16379CVE-2026-16381CVE-2026-16383CVE-2026-16387CVE-2026-16390CVE-2026-16391CVE-2026-16396CVE-2026-16405CVE-2026-16412
Timeline
- 07-08-2026PublishedVulnerability first disclosed.
- 07-08-2026Last modifiedVulnerability information updated.
Description
Updated rootcerts, nss & firefox packages fix security vulnerabilities Updated rootcerts, nss & firefox packages fixes various vulnerabilities. Please see the links for detailed information of each one.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia8 products
- firefox< 140.13.0-1.mga10
- firefox-l10n< 140.13.0-1.mga10
- nss< 3.126.0-1.mga10
- rootcerts< 20260714.00-1.mga10
- firefox< 140.13.0-1.mga9
- firefox-l10n< 140.13.0-1.mga9
- nss< 3.126.0-1.mga9
- rootcerts< 20260714.00-1.mga9
1 vendor · 8 products
References
5 linksRelated vulnerabilities
MGASA-2026-0522mageiafirefox+2Updated firefox, nss, firefox-l10n packages fix security vulnerabilities
Privilege escalation in the Application Update component.
(CVE-2026-109704)
Sandbox escape, site isolation issue due to incorrect boundary
conditions, use-after-free in the Networking component.
(CVE-2026-109705)
Use-after-free in the Storage: IndexedDB component. (CVE-2026-109706)
Sandbox escape due to use-after-free in the Networking component.
(CVE-2026-109707)
Sandbox escape due to incorrect boundary conditions in the Networking
component. (CVE-2026-109708)
Information disclosure, privilege escalation in the Security: Process
Sandboxing component. (CVE-2026-109709)
Use-after-free in the Graphics: Text component. (CVE-2026-109710)
Use-after-free in the Graphics: Canvas2D component. (CVE-2026-109711)
Sandbox escape due to uninitialized memory in the Graphics component.
(CVE-2026-109712)
Use-after-free in the Crash Reporting component. (CVE-2026-109713)
Incorrect boundary conditions in the JavaScript Engine component.
(CVE-2026-109715)
Incorrect boundary conditions in the JavaScript Engine component.
(CVE-2026-109716)
Use-after-free in the DOM: Bindings (WebIDL) component.
(CVE-2026-109717)
Use-after-free in the XML component. (CVE-2026-109718)
Race condition, use-after-free in the Graphics: CanvasWebGL component.
(CVE-2026-109719)
JIT miscompilation in the JavaScript: WebAssembly component.
(CVE-2026-109720)
Incorrect boundary conditions in the JavaScript Engine: JIT component.
(CVE-2026-109721)
JIT miscompilation in the JavaScript Engine: JIT component.
(CVE-2026-109722)
Integer overflow in the Layout: Text and Fonts component.
(CVE-2026-109723)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-109724)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-109725)
Use-after-free in the SVG component. (CVE-2026-109726)
Use-after-free in the Audio/Video component. (CVE-2026-109727)
Use-after-free in the DOM: Animation component. (CVE-2026-109728)
Use-after-free in the JavaScript Engine: JIT component.
(CVE-2026-109729)
Integer overflow in the Graphics component. (CVE-2026-109730)
Incorrect boundary conditions in the Graphics: Canvas2D component.
(CVE-2026-109731)
Use-after-free in the DOM: Streams component. (CVE-2026-109732)
JIT miscompilation in the JavaScript Engine: JIT component.
(CVE-2026-109733)
Mitigation bypass in the DOM: Security component. (CVE-2026-109734)
Frame poisoning in the Layout component. (CVE-2026-109736)
Mitigation bypass in the Enterprise Policies component.
(CVE-2026-109737)
Use-after-free in the Audio/Video: Playback component. (CVE-2026-109738)
Use-after-free in the Storage: Bucket File System component.
(CVE-2026-109741)
Information disclosure in the PDF Viewer component. (CVE-2026-109742)
Privilege escalation in the Panning and Zooming component.
(CVE-2026-109743)
Other issue in the DOM: File component. (CVE-2026-109744)
Sandbox escape due to uninitialized memory in the DOM: Web Serial
component. (CVE-2026-109745)
Mitigation bypass in the File Handling component. (CVE-2026-109782)
Information disclosure in the Networking component. (CVE-2026-109751)
Use-after-free in the DOM: Workers component. (CVE-2026-109752)
Incorrect boundary conditions in the Layout component. (CVE-2026-109753)
Incorrect boundary conditions in the DOM: Editor component.
(CVE-2026-109754)
Privilege escalation in the DOM: Navigation component. (CVE-2026-109756)
Sandbox escape due to race condition in the Networking component.
(CVE-2026-109757)
Site isolation issue in the Networking component. (CVE-2026-109759)
Mitigation bypass in the Networking: HTTP component. (CVE-2026-109760)
Incorrect boundary conditions in the SVG component. (CVE-2026-109762)
Mitigation bypass in the File Handling component. (CVE-2026-109763)
Mitigation bypass in the Enterprise Policies component.
(CVE-2026-109764)
Race condition, use-after-free in the Graphics: Text component.
(CVE-2026-109765)
Mitigation bypass in the Enterprise Policies component.
(CVE-2026-109766)
Information disclosure in the Networking component. (CVE-2026-109767)
Mitigation bypass in the File Handling component. (CVE-2026-109783)
Spoofing issue in the DOM: Web Serial component. (CVE-2026-109770)
Denial-of-service in the WebRTC component. (CVE-2026-109775)
Race condition in the XPCOM component. (CVE-2026-109776)
Information disclosure in the Storage: IndexedDB component.
(CVE-2026-109777)
Privilege escalation in the WebExtensions component. (CVE-2026-109778)
Denial-of-service in the Printing: Output component. (CVE-2026-109781)MGASA-2026-0491mageiafirefox+2Updated nss & firefox packages fix security vulnerabilities
Incorrect boundary conditions in the Audio/Video: Playback component.
(CVE-2026-100756)
Use-after-free in the Widget component. (CVE-2026-100757)
Sandbox escape in the DOM: Navigation component. (CVE-2026-100758)
Uninitialized memory in the Storage: Quota Manager component.
(CVE-2026-100759)
Sandbox escape in the Security: Process Sandboxing component.
(CVE-2026-100760)
Sandbox escape due to use-after-free in the DOM: Content Processes component.
(CVE-2026-100762)
Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100765)
Information disclosure in the Networking: JAR component. (CVE-2026-100766)
Use-after-free in the Networking: Cache component. (CVE-2026-100767)
Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100769)
Sandbox escape due to use-after-free in the DOM: Content Processes component.
(CVE-2026-100770)
Undefined behavior in the DOM: Streams component. (CVE-2026-100771)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-100772)
Use-after-free in the Storage: IndexedDB component. (CVE-2026-100773)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-100774)
Sandbox escape in the Graphics component. (CVE-2026-100775)
Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100776)
Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100777)
Sandbox escape due to use-after-free in the DOM: Core & HTML component.
(CVE-2026-100778)
Use-after-free in the XSLT component. (CVE-2026-100779)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-100780)
Sandbox escape due to incorrect boundary conditions in the Graphics:
WebRender component. (CVE-2026-100781)
Privilege escalation due to incorrect boundary conditions in the Graphics
component. (CVE-2026-100782)
Uninitialized memory in the Audio/Video component. (CVE-2026-100783)
Use-after-free in the Layout: Text and Fonts component. (CVE-2026-100784)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-100785)
Sandbox escape due to use-after-free in the Graphics component.
(CVE-2026-100786)
Sandbox escape in the XUL component. (CVE-2026-100787)
Invalid pointer in the JavaScript: WebAssembly component. (CVE-2026-100788)
Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100789)
Use-after-free in the XSLT component. (CVE-2026-100790)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-100791)
Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100832)
JIT miscompilation in the JavaScript: WebAssembly component. (CVE-2026-100792)
Sandbox escape due to incorrect boundary conditions in the
Internationalization component. (CVE-2026-100794)
Information disclosure in the Networking component. (CVE-2026-96869)
Privilege escalation due to use-after-free in the Graphics: WebRender
component. (CVE-2026-100797)
Cryptography misuse in Storage: Quota Manager component. (CVE-2026-100798)
Sandbox escape due to use-after-free in the Disability Access APIs component.
(CVE-2026-100800)
Privilege escalation in the DLL Services component. (CVE-2026-100801)
Same-origin policy bypass in the WebExtensions component. (CVE-2026-100803)
Uninitialized memory in the Graphics: WebGPU component. (CVE-2026-100806)
Privilege escalation in the DOM: Service Workers component. (CVE-2026-100807)
Mitigation bypass in the DOM: Service Workers component. (CVE-2026-100808)
Same-origin policy bypass in the DevTools component. (CVE-2026-100809)
Sandbox escape due to use-after-free in the DOM: Core & HTML component.
(CVE-2026-100811)
Denial-of-service in the Graphics component. (CVE-2026-100812)
Incorrect boundary conditions in the JavaScript Engine: JIT component.
(CVE-2026-100814)
Use-after-free in the CSS Parsing and Computation component. (CVE-2026-100815)
Site isolation issue in the DOM: Networking component. (CVE-2026-100816)
Sandbox escape due to use-after-free in the Widget: Gtk component.
(CVE-2026-100818)
Sandbox escape due to incorrect boundary conditions in the XPCOM component.
(CVE-2026-100819)
Privilege escalation in the Address Bar component. (CVE-2026-100820)
Site isolation issue in the Panning and Zooming component. (CVE-2026-100821)
Spoofing issue in the Networking: HTTP component. (CVE-2026-100822)
Privilege escalation in the Places component. (CVE-2026-100824)
Use-after-free in the JavaScript Engine: JIT component. (CVE-2026-100825)
Denial-of-service in the Storage: StorageManager component. (CVE-2026-100826)
Mitigation bypass in the Bookmarks & History component. (CVE-2026-100828)
Mitigation bypass in the DOM: Security component. (CVE-2026-100829)
Mitigation bypass in the DOM: Navigation component. (CVE-2026-100830)
Use-after-free in the DOM: UI Events & Focus Handling component.
(CVE-2026-100831)MGASA-2026-0441mageiafirefox+5Updated nss & firefox packages fix security vulnerabilities
Use-after-free in the Audio/Video: Web Codecs component.
(CVE-2026-92005)
Privilege escalation due to incorrect boundary conditions in the
Graphics: CanvasWebGL component. (CVE-2026-92006)
Privilege escalation due to incorrect boundary conditions in the
Graphics: CanvasWebGL component. (CVE-2026-92007)
Privilege escalation due to incorrect boundary conditions in the
Graphics: CanvasWebGL component. (CVE-2026-92008)
Privilege escalation due to incorrect boundary conditions in the
Graphics: CanvasWebGL component. (CVE-2026-92009)
Privilege escalation due to incorrect boundary conditions in the
Graphics: CanvasWebGL component. (CVE-2026-92010)
Privilege escalation due to incorrect boundary conditions in the
Graphics: CanvasWebGL component. (CVE-2026-92011)
Privilege escalation due to incorrect boundary conditions in the
Graphics: CanvasWebGL component. (CVE-2026-92012)
Privilege escalation due to incorrect boundary conditions in the
Graphics: CanvasWebGL component. (CVE-2026-92013)
Privilege escalation due to incorrect boundary conditions in the
Graphics component. (CVE-2026-92014)
Privilege escalation in the WebExtensions component. (CVE-2026-92015)
Use-after-free in the Disability Access APIs component. (CVE-2026-92016)
Privilege escalation in the DOM: Service Workers component.
(CVE-2026-92017)
Sandbox escape in the DOM: Core & HTML component. (CVE-2026-92018)
Mitigation bypass in the Remote Settings Client component.
(CVE-2026-92019)
Privilege escalation due to incorrect boundary conditions in the
Graphics: WebRender component. (CVE-2026-92020)
Use-after-free in the JavaScript Engine: JIT component. (CVE-2026-92021)
Use-after-free in the DOM: HTML Parser component. (CVE-2026-92022)
Use-after-free in the XML component. (CVE-2026-92023)
Use-after-free in the SVG component. (CVE-2026-92024)
Use-after-free in the DOM: Navigation component. (CVE-2026-92025)
Use-after-free in the Networking component. (CVE-2026-92026)
Use-after-free in the DOM: Streams component. (CVE-2026-92027)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-92028)
Use-after-free in the SVG component. (CVE-2026-92029)
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component.
(CVE-2026-92030)
Information disclosure in the Graphics: ImageLib component.
(CVE-2026-92031)
Sandbox escape due to invalid pointer in the Graphics component.
(CVE-2026-92032)
Mitigation bypass in the Remote Settings Client component.
(CVE-2026-92038)
Mitigation bypass in the DOM: Notifications component. (CVE-2026-92039)
Mitigation bypass in the DOM: Networking component. (CVE-2026-92041)
Race condition in the DOM: Content Processes component. (CVE-2026-92042)
Privilege escalation due to incorrect boundary conditions in the
Audio/Video component. (CVE-2026-92043)
Information disclosure in the Networking: HTTP component.
(CVE-2026-92044)
Sandbox escape due to incorrect boundary conditions in the WebRTC
component. (CVE-2026-92045)
Use-after-free in the Graphics component. (CVE-2026-92046)
Privilege escalation in the Crash Reporting component. (CVE-2026-92047)
Privilege escalation due to uninitialized memory in the Graphics:
CanvasWebGL component. (CVE-2026-92052)
Privilege escalation in the Graphics: CanvasWebGL component.
(CVE-2026-92053)
Privilege escalation in the Memory component. (CVE-2026-92054)
Privilege escalation in the DevTools component. (CVE-2026-92055)
Use-after-free in the Graphics: Text component. (CVE-2026-92056)
Mitigation bypass in the Enterprise Policies component. (CVE-2026-92057)
Use-after-free in the Graphics component. (CVE-2026-92058)
Incorrect boundary conditions in the DOM: Editor component.
(CVE-2026-92059)
Use-after-free in the Internationalization component. (CVE-2026-92060)
Privilege escalation in the Session Restore component. (CVE-2026-92062)
Use-after-free in the Widget: Gtk component. (CVE-2026-92067)
Site isolation issue in the Reader Mode component. (CVE-2026-92068)
Spoofing issue in the DOM: Navigation component. (CVE-2026-92069)
Information disclosure in the Networking component. (CVE-2026-92070)
Incorrect boundary conditions in the Safe Browsing component.
(CVE-2026-92072)
Privilege escalation in the Enterprise Policies component.
(CVE-2026-92073)
Mitigation bypass in the Popup Blocker component. (CVE-2026-92074)
Mitigation bypass in the Networking component. (CVE-2026-92075)
Incorrect boundary conditions in the Networking component.
(CVE-2026-92076)
Denial-of-service in the SVG component. (CVE-2026-92077)
Denial-of-service in the Security component. (CVE-2026-92078)MGASA-2026-0387mageiafirefox+5Updated firefox & nss packages fix security vulnerabilities
Sandbox escape in the Remote Settings Client component. (CVE-2026-75874)
Privilege escalation in the DOM: Workers component. (CVE-2026-16365)
Use-after-free in the JavaScript: GC component. (CVE-2026-84118)
Sandbox escape due to use-after-free in the DOM: Navigation component.
(CVE-2026-84119)
Use-after-free in the Audio/Video component. (CVE-2026-84120)
Sandbox escape due to use-after-free in the DOM: Security component.
(CVE-2026-84121)
Use-after-free in the Audio/Video component. (CVE-2026-84122)
Privilege escalation due to use-after-free in the Graphics: WebGPU
component. (CVE-2026-84123)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-84124)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-84125)
Privilege escalation in the DOM: Navigation component. (CVE-2026-16371)
Privilege escalation in the Application Update component.
(CVE-2026-74952)
Site isolation issue in the DOM: Navigation component. (CVE-2026-84129)
Information disclosure in the Graphics: WebGPU component.
(CVE-2026-84130)
Privilege escalation due to invalid pointer in the Graphics component.
(CVE-2026-84131)
Information disclosure in the Networking: HTTP component.
(CVE-2026-84132)
Site isolation issue in the DOM: Push Subscriptions component.
(CVE-2026-84133)
Other issue in the Profile Backup component. (CVE-2026-84134)
Other issue in the DOM: Navigation component. (CVE-2026-84136)
Spoofing issue in the DOM: Core & HTML component. (CVE-2026-84137)
Clickjacking issue in the DOM: Events component. (CVE-2026-84139)
Site isolation issue in the DOM: Navigation component. (CVE-2026-84140)
Integer overflow in the Graphics: ImageLib component. (CVE-2026-84141)
Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and
Firefox ESR 140.15. (CVE-2026-84143)
Internally found bugs fixed in Firefox 155 and Firefox ESR 153.2.
(CVE-2026-84144)
Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox
ESR 140.15 and Firefox ESR 115.40. (CVE-2026-84145)MGASA-2026-0345mageiafirefox+7Updated nspr, nss, & firefox packages fix security vulnerabilities
Site isolation issue in the Graphics: CanvasWebGL component.
(CVE-2026-74934)
Privilege escalation in the DOM: Networking component. (CVE-2026-74935)
Use-after-free in the JavaScript: WebAssembly component.
(CVE-2026-74936)
Use-after-free in the JavaScript: GC component. (CVE-2026-74937)
Mitigation bypass in the JavaScript: GC component. (CVE-2026-74938)
Privilege escalation in the DOM: Navigation component. (CVE-2026-74939)
Use-after-free in the Graphics: Text component. (CVE-2026-74940)
Privilege escalation in the Graphics: CanvasWebGL component.
(CVE-2026-74941)
Privilege escalation in the Remote Settings Client component.
(CVE-2026-74942)
Use-after-free in the Graphics: ImageLib component. (CVE-2026-74943)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-74944)
Information disclosure in the Graphics: Text component. (CVE-2026-74945)
Privilege escalation due to incorrect boundary conditions in the
Graphics: CanvasWebGL component. (CVE-2026-74946)
Privilege escalation due to invalid pointer in the Graphics component.
(CVE-2026-74947)
Information disclosure in the Graphics component. (CVE-2026-74948)
Privilege escalation in the Downloads API component. (CVE-2026-74950)
Privilege escalation in the Networking: Cookies component.
(CVE-2026-74953)
Information disclosure due to side-channel in the Storage: Cache API
component. (CVE-2026-74954)
Privilege escalation in the Request Handling component. (CVE-2026-74955)
Same-origin policy bypass in the DOM: Service Workers component.
(CVE-2026-74956)
Mitigation bypass in the Safe Browsing component. (CVE-2026-74957)
Information disclosure in the WebRTC component. (CVE-2026-74958)
Mitigation bypass in the Storage: Cache API component. (CVE-2026-74959)
Site isolation issue in the WebExtensions component. (CVE-2026-74960)
Side-channel in the Web Audio component. (CVE-2026-74961)
Site isolation issue in the Networking: Cookies component.
(CVE-2026-74962)
Same-origin policy bypass in the Networking: Cookies component.
(CVE-2026-74963)
Integer overflow in the Graphics component. (CVE-2026-74964)
Privilege escalation in the Shell Integration component.
(CVE-2026-74965)
Information disclosure in the Form Autofill component. (CVE-2026-74966)
Same-origin policy bypass in the Audio/Video: Playback component.
(CVE-2026-74967)
Site isolation issue in the Graphics: WebRender component.
(CVE-2026-74968)
Use-after-free in the Layout: Text and Fonts component. (CVE-2026-74969)
Site isolation issue in the Graphics component. (CVE-2026-74970)
Information disclosure in the DOM: UI Events & Focus Handling component.
(CVE-2026-74971)
Information disclosure in the DOM: Push Subscriptions component.
(CVE-2026-74972)
Use-after-free in the Graphics: Canvas2D component. (CVE-2026-74949)
Race condition, use-after-free in the Graphics component.
(CVE-2026-74973)
Same-origin policy bypass in the Graphics: ImageLib component.
(CVE-2026-74974)
JIT miscompilation in the JavaScript Engine: JIT component.
(CVE-2026-74976)
Integer overflow in the Graphics component. (CVE-2026-74977)
Clickjacking issue in the Widget component. (CVE-2026-74978)
Mitigation bypass in the Add-ons Manager component. (CVE-2026-74979)
Site isolation issue in the Audio/Video: Web Codecs component.
(CVE-2026-74981)
Denial-of-service in the Widget component. (CVE-2026-74982)
Mitigation bypass in the Data Loss Prevention component.
(CVE-2026-74983)
Race condition in the JavaScript Engine component. (CVE-2026-74984)
Privilege escalation in the Enterprise Policies component.
(CVE-2026-74985)
Site isolation issue in the CSS Parsing and Computation component.
(CVE-2026-74986)
Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and
Firefox 154. (CVE-2026-74987)
Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154.
(CVE-2026-74988)
Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and
Firefox 154. (CVE-2026-74990)MGASA-2026-0242mageiafirefox+7Updated firefox, firefox-l10n, rootcerts, nss packages fix security vulnerabilities
The updated packages fix security vulnerabilities:
Privilege escalation in the Graphics: WebRender component.
(CVE-2026-12289)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12290)
Use-after-free in the Networking: HTTP component. (CVE-2026-12291)
Incorrect boundary conditions in the Web Audio component.
(CVE-2026-12292)
Sandbox escape in the DOM: Workers component. (CVE-2026-12294)
Sandbox escape in the DOM: Navigation component. (CVE-2026-12295)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12298)
Sandbox escape in the Security: Process Sandboxing component.
(CVE-2026-12296)
Sandbox escape due to incorrect boundary conditions in the Networking
component. (CVE-2026-12297)
JIT miscompilation in the DOM: Core & HTML component. (CVE-2026-12299)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12329)
Mitigation bypass in the DOM: Security component. (CVE-2026-12302)
Same-origin policy bypass in the Networking: Cookies component.
(CVE-2026-12304)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12305)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12306)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12307)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12308)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12309)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12310)
Information disclosure, sandbox escape in the Security: Process
Sandboxing component. (CVE-2026-12311)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12312)
Information disclosure, sandbox escape in the Security: Process
Sandboxing component. (CVE-2026-12313)
Memory safety bug fixed in Firefox ESR 140.12. (CVE-2026-12314)
Mitigation bypass in the DOM: Security component. (CVE-2026-12315)
Incorrect boundary conditions in the Internationalization component.
(CVE-2026-12330)
Incorrect boundary conditions in the Graphics: CanvasWebGL component.
(CVE-2026-12324)
Denial-of-service in the Graphics: ImageLib component. (CVE-2026-12325)
Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12,
Firefox 152 and Thunderbird 152. (CVE-2026-12327)
Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12,
Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152.
(CVE-2026-12328)