CVE-2026-3845
Published Mar 10, 2026Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2.
- evidence mentions
- 2
- Buzz score
- 21.0
Vendor/product archive
mozilla / firefox CVEs
Beta · best-effort3,231 CVEs tagged to mozilla / firefox — 890 Critical, 953 High, 1,310 Medium, 78 Low, 0 Unrated.
CVE-2026-2807
Published Feb 24, 2026Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h…
- evidence mentions
- 6
- Buzz score
- 34.0
CVE-2026-2806
Published Feb 24, 2026Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 3
- Buzz score
- 23.9
CVE-2026-2805
Published Feb 24, 2026Invalid pointer in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 3
- Buzz score
- 23.9
CVE-2026-2804
Published Feb 24, 2026Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 3
- Buzz score
- 23.9
CVE-2026-2803
Published Feb 24, 2026Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 3
- Buzz score
- 23.9
CVE-2026-2802
Published Feb 24, 2026Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 3
- Buzz score
- 23.9
CVE-2026-2801
Published Feb 24, 2026Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 3
- Buzz score
- 23.9
CVE-2026-2800
Published Feb 24, 2026Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 3
- Buzz score
- 23.9
CVE-2026-2799
Published Feb 24, 2026Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 6
- Buzz score
- 34.0
CVE-2026-2798
Published Feb 24, 2026Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 6
- Buzz score
- 34.0
CVE-2026-2797
Published Feb 24, 2026Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 6
- Buzz score
- 34.0
CVE-2026-2796
Published Feb 24, 2026JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 7
- Buzz score
- 40.3
CVE-2026-2795
Published Feb 24, 2026Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.
- evidence mentions
- 6
- Buzz score
- 34.0
CVE-2026-2794
Published Feb 24, 2026Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.
- evidence mentions
- 5
- Buzz score
- 32.4
CVE-2026-2793
Published Feb 24, 2026Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruptio…
- evidence mentions
- 34
- Buzz score
- 44.5
CVE-2026-2792
Published Feb 24, 2026Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume tha…
- evidence mentions
- 33
- Buzz score
- 44.5
CVE-2026-2791
Published Feb 24, 2026Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
- evidence mentions
- 5
- Buzz score
- 27.9
CVE-2026-2790
Published Feb 24, 2026Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
- evidence mentions
- 5
- Buzz score
- 27.9
CVE-2026-2789
Published Feb 24, 2026Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
- evidence mentions
- 6
- Buzz score
- 29.5
CVE-2026-2788
Published Feb 24, 2026Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbi…
- evidence mentions
- 6
- Buzz score
- 29.5
CVE-2026-2787
Published Feb 24, 2026Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.…
- evidence mentions
- 6
- Buzz score
- 29.5
CVE-2026-2786
Published Feb 24, 2026Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
- evidence mentions
- 5
- Buzz score
- 27.9
CVE-2026-2785
Published Feb 24, 2026Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
- evidence mentions
- 5
- Buzz score
- 27.9
CVE-2026-2784
Published Feb 24, 2026Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
- evidence mentions
- 5
- Buzz score
- 27.9
Showing 201-225 of 3,231 CVEsPage 9 of 130