Firefox Focus CVE-2026-11799

Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run atta

When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Rated high severity (CVSS 8.8), this vulnerability is r

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resu

Memory safety bugs present in Firefox 111. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, n

An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global ob

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-contro

Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. Rated medi

A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. Rated medium severity (C

If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused mem

Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm. Rated me

When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, w