Search CVE reports


Toggle filters

421 – 430 of 3420 results


CVE-2026-4700

Medium priority
Vulnerable

Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

9 affected packages

firefox, mozjs102, mozjs115, mozjs38, mozjs52...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
thunderbird Not affected Not affected Vulnerable — —
Show all 9 packages Show less packages

CVE-2026-4699

Medium priority
Vulnerable

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

9 affected packages

firefox, mozjs102, mozjs115, mozjs38, mozjs52...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
thunderbird Not affected Not affected Vulnerable — —
Show all 9 packages Show less packages

CVE-2026-4698

Medium priority
Vulnerable

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

9 affected packages

firefox, mozjs102, mozjs115, mozjs38, mozjs52...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
thunderbird Not affected Not affected Vulnerable — —
Show all 9 packages Show less packages

CVE-2026-4697

Medium priority
Vulnerable

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

9 affected packages

firefox, mozjs102, mozjs115, mozjs38, mozjs52...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
thunderbird Not affected Not affected Vulnerable — —
Show all 9 packages Show less packages

CVE-2026-4696

Medium priority
Vulnerable

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

9 affected packages

firefox, mozjs102, mozjs115, mozjs38, mozjs52...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
thunderbird Not affected Not affected Vulnerable — —
Show all 9 packages Show less packages

CVE-2026-4695

Medium priority
Vulnerable

Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

9 affected packages

firefox, mozjs102, mozjs115, mozjs38, mozjs52...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
thunderbird Not affected Not affected Vulnerable — —
Show all 9 packages Show less packages

CVE-2026-4694

Medium priority
Vulnerable

Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

9 affected packages

firefox, mozjs102, mozjs115, mozjs38, mozjs52...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
thunderbird Not affected Not affected Vulnerable — —
Show all 9 packages Show less packages

CVE-2026-4693

Medium priority
Vulnerable

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

9 affected packages

firefox, mozjs102, mozjs115, mozjs38, mozjs52...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
thunderbird Not affected Not affected Vulnerable — —
Show all 9 packages Show less packages

CVE-2026-4692

Medium priority
Vulnerable

Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

9 affected packages

firefox, mozjs102, mozjs115, mozjs38, mozjs52...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
thunderbird Not affected Not affected Vulnerable — —
Show all 9 packages Show less packages

CVE-2026-4691

Medium priority
Vulnerable

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

9 affected packages

firefox, mozjs102, mozjs115, mozjs38, mozjs52...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
thunderbird Not affected Not affected Vulnerable — —
Show all 9 packages Show less packages