|
2001
|
9.8 |
CRITICAL
Network
|
mozilla
|
firefox thunderbird
|
Condiciones de contorno incorrectas en el componente Networking: JAR. Esta vulnerabilidad afecta a Firefox < 148, Firefox ESR < 140.8, Thunderbird < 148, y Thunderbird < 140.8.
|
NVD-CWE-noinfo CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2026-2779
|
2026-04-14 00:17 |
2026-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2002
|
10.0 |
CRITICAL
Network
|
mozilla
|
firefox thunderbird
|
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunder…
|
NVD-CWE-noinfo CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2026-2778
|
2026-04-14 00:17 |
2026-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2003
|
10.0 |
CRITICAL
Network
|
mozilla
|
firefox thunderbird
|
Escape de sandbox debido a condiciones de límite incorrectas en el DOM: Componente Core y HTML. Esta vulnerabilidad afecta a Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunder…
|
NVD-CWE-noinfo CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2026-2778
|
2026-04-14 00:17 |
2026-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2004
|
9.8 |
CRITICAL
Network
|
mozilla
|
firefox thunderbird
|
Privilege escalation in the Messaging System component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
|
NVD-CWE-noinfo CWE-269
Improper Privilege Management
|
CVE-2026-2777
|
2026-04-14 00:17 |
2026-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2005
|
9.8 |
CRITICAL
Network
|
mozilla
|
firefox thunderbird
|
Escalada de privilegios en el componente del sistema de mensajería. Esta vulnerabilidad afecta a Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148, y Thunderbird…
|
NVD-CWE-noinfo CWE-269
Improper Privilege Management
|
CVE-2026-2777
|
2026-04-14 00:17 |
2026-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2006
|
10.0 |
CRITICAL
Network
|
mozilla
|
firefox thunderbird
|
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 14…
|
NVD-CWE-noinfo CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2026-2776
|
2026-04-14 00:17 |
2026-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2007
|
10.0 |
CRITICAL
Network
|
mozilla
|
firefox thunderbird
|
Escape de sandbox debido a condiciones de contorno incorrectas en el componente de Telemetría en el Software Externo. Esta vulnerabilidad afecta a Firefox < 148, Firefox ESR < 115.33, Firefox E…
|
NVD-CWE-noinfo CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2026-2776
|
2026-04-14 00:17 |
2026-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2008
|
9.8 |
CRITICAL
Network
|
mozilla
|
firefox thunderbird
|
Mitigation bypass in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
|
NVD-CWE-noinfo CWE-288
Authentication Bypass Using an Alternate Path or Channel
|
CVE-2026-2775
|
2026-04-14 00:17 |
2026-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2009
|
9.8 |
CRITICAL
Network
|
mozilla
|
firefox thunderbird
|
Omisión de mitigación en el DOM: componente del analizador HTML. Esta vulnerabilidad afecta a Firefox < 148, Firefox ESR < 115.33, Firefox ESR < 140.8, Thunderbird < 148 y Thunderbird <…
|
NVD-CWE-noinfo CWE-288
Authentication Bypass Using an Alternate Path or Channel
|
CVE-2026-2775
|
2026-04-14 00:17 |
2026-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2010
|
8.8 |
HIGH
Network
|
mozilla
|
firefox thunderbird
|
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2026-2774
|
2026-04-14 00:17 |
2026-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|