186
CVEs
60
Critical
73
High
0
KEV
6
PoC
12
Unpatched C/H
87.6%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
60
HIGH
73
MEDIUM
52
LOW
1
Monthly CVE Trend
Affected Products (30)
Firefox
214
Thunderbird
145
Memory Corruption
37
Use After Free
21
Android
14
iOS
14
Windows
10
Open Redirect
9
Ubuntu
7
Integer Overflow
7
Race Condition
4
macOS
3
Chrome
3
Command Injection
3
Cors Misconfiguration
3
Node.js
2
Prototype Pollution
2
Python
2
Safari
2
Firefox Focus
1
Anything Llm
1
Enterprise Linux Eus
1
Seamonkey
1
Docker
1
Enterprise Linux Server Tus
1
Vpn
1
Enterprise Linux Workstation
1
Enterprise Linux Desktop
1
Heap Overflow
1
Enterprise Linux Server Aus
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-2796 | JIT miscompilation in Firefox WebAssembly before 148. The JIT compiler generates incorrect Wasm code, enabling type confusion. PoC available. | CRITICAL | 9.8 | 0.1% | 69 |
PoC
|
| CVE-2026-0889 | Service Workers in Mozilla Firefox and Thunderbird versions below 147 are vulnerable to remote denial-of-service attacks that require no user interaction or authentication. An unauthenticated attacker can crash affected applications over the network, and public exploit code exists for this vulnerability. Currently no patch is available for remediation. | HIGH | 7.5 | 0.0% | 58 |
PoC
|
| CVE-2026-2778 | Sandbox escape via DOM Core & HTML component in Firefox before 148. CVSS 10.0 — fifth sandbox escape in this release. | CRITICAL | 10.0 | 0.1% | 50 |
|
| CVE-2026-4688 | Sandbox escape in Mozilla Firefox's Disability Access APIs component due to a use-after-free memory vulnerability allows unauthenticated remote attackers to execute arbitrary code with full system compromise. Firefox versions below 149 and Firefox ESR below 140.9 are affected, with no patch currently available. The vulnerability is exploitable over the network without user interaction, presenting critical risk to all affected users. | CRITICAL | 10.0 | 0.0% | 50 |
|
| CVE-2026-4725 | Unauthenticated remote attackers can escape the Firefox sandbox through a use-after-free vulnerability in the Canvas2D graphics component, allowing arbitrary code execution on affected systems running Firefox versions prior to 149. The vulnerability requires no user interaction and impacts the entire system due to its critical severity and CVSS score of 10.0. No patch is currently available for this actively exploitable flaw. | CRITICAL | 10.0 | 0.0% | 50 |
|
| CVE-2026-4692 | A sandbox escape vulnerability exists in Firefox's Responsive Design Mode component that allows attackers to break out of the browser's security sandbox and access sensitive information. This affects Firefox versions prior to 149, Firefox ESR prior to 115.34, and Firefox ESR prior to 140.9. An attacker can exploit this vulnerability to disclose information by circumventing the sandbox restrictions that normally isolate web content from the browser's privileged context. | CRITICAL | 10.0 | 0.0% | 50 |
|
| CVE-2026-4689 | A sandbox escape vulnerability exists in Firefox's XPCOM component due to incorrect boundary conditions and integer overflow, allowing attackers to bypass security sandboxing mechanisms. This affects Firefox versions below 149, Firefox ESR below 115.34, and Firefox ESR below 140.9. An attacker can exploit this flaw to escape the browser sandbox and potentially execute arbitrary code with elevated privileges on the affected system. | CRITICAL | 10.0 | 0.0% | 50 |
PoC
|
| CVE-2025-6424 | A denial of service vulnerability (CVSS 9.8). Critical severity with potential for significant impact on affected systems. | CRITICAL | 9.8 | 0.3% | 49 |
|
| CVE-2025-49709 | Critical memory corruption vulnerability in Firefox canvas operations that allows unauthenticated remote attackers to achieve arbitrary code execution with no user interaction required. Firefox versions prior to 139.0.4 are affected. The vulnerability has a near-perfect CVSS score of 9.8 due to network accessibility, low attack complexity, and complete compromise of confidentiality, integrity, and availability. | CRITICAL | 9.8 | 0.1% | 49 |
|
| CVE-2025-49710 | An integer overflow vulnerability exists in the OrderedHashTable component of Firefox's JavaScript engine, allowing remote attackers to achieve arbitrary code execution without requiring user interaction or elevated privileges. This critical flaw affects Firefox versions prior to 139.0.4 and carries a maximum CVSS score of 9.8, indicating severe real-world risk with network-based attack vectors requiring no user interaction. | CRITICAL | 9.8 | 0.1% | 49 |
|
| CVE-2026-2757 | Boundary violation in Firefox WebRTC Audio/Video component before 148 allows remote code execution through crafted WebRTC media streams. | CRITICAL | 9.8 | 0.1% | 49 |
|
| CVE-2026-2759 | Boundary violation in Firefox ImageLib graphics component before 148 enables memory corruption through crafted images. | CRITICAL | 9.8 | 0.1% | 49 |
|
| CVE-2026-2771 | Undefined behavior in Firefox DOM Core & HTML component before 148. Can lead to memory corruption and potential code execution. | CRITICAL | 9.8 | 0.1% | 49 |
|
| CVE-2026-2773 | Boundary error in Firefox Web Audio component before 148. Crafted audio processing triggers memory corruption. | CRITICAL | 9.8 | 0.1% | 49 |
|
| CVE-2026-2775 | HTML parser mitigation bypass in Firefox DOM before 148. Bypasses content sanitization protections via alternate authentication path in the HTML parser. | CRITICAL | 9.8 | 0.1% | 49 |
|