Lundi 19 octobre 2026
19 CVE
-
CVE-2026-109770 6.1 Moyenne
Mozilla Firefox · Mozilla Thunderbird
Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109764 5.4 Moyenne
Mozilla Firefox · Mozilla Thunderbird
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109762 8.8 Élevée
Mozilla Firefox · Mozilla Thunderbird
Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109750 9.6 Critique
Mozilla Firefox · Mozilla Thunderbird
Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
-
CVE-2026-109766 8.1 Élevée
Mozilla Firefox · Mozilla Thunderbird
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109760 8.1 Élevée
Mozilla Firefox · Mozilla Thunderbird
Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109759 8.1 Élevée
Mozilla Firefox · Mozilla Thunderbird
Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109754 8.1 Élevée
Mozilla Firefox · Mozilla Thunderbird
Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109747 7.3 Élevée
Mozilla Firefox · Mozilla Thunderbird
Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
-
CVE-2026-109746 7.3 Élevée
Mozilla Firefox · Mozilla Thunderbird
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
-
CVE-2026-109745 9.6 Critique
Mozilla Firefox · Mozilla Thunderbird
Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109744 8.1 Élevée
Mozilla Firefox · Mozilla Thunderbird
Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109740 9.6 Critique
Mozilla Firefox · Mozilla Thunderbird
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109737 8.1 Élevée
Mozilla Firefox · Mozilla Thunderbird
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109736 8.1 Élevée
Mozilla Firefox · Mozilla Thunderbird
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109734 8.1 Élevée
Mozilla Firefox · Mozilla Thunderbird
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109731 5.4 Moyenne
Mozilla Firefox · Mozilla Thunderbird
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109721 5.4 Moyenne
Mozilla Firefox · Mozilla Thunderbird
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
-
CVE-2026-109720 7.1 Élevée
Mozilla Firefox · Mozilla Thunderbird
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.