{ "fix": "Firefox Developer Edition (en-US) 156.0", "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.developeredition-156.0", "summary": "Firefox Developer Edition (en-US) 156.0, released September 2, 2026, fixes 259 CVEs in Firefox Developer Edition (en-US). None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "windows-app", "type": "app-version", "title": "Firefox Developer Edition (en-US) 156.0", "released": "2026-09-02T00:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-74943, rated Critical", "supported": true, "cveCount": 259, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00961, "maxCvss": 10, "appliesTo": [ { "product": "Firefox Developer Edition (en-US)", "productUrl": "https://patchblox.com/security/product/windows-app/firefox-developer-edition-en-us", "fixedVersion": "156.0", "latestVersion": "156.0", "supported": true } ], "cves": [ { "cveId": "CVE-2026-74943", "url": "https://patchblox.com/security/cve/CVE-2026-74943", "title": "Use-after-free in the Graphics: ImageLib component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00961, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16357", "url": "https://patchblox.com/security/cve/CVE-2026-16357", "title": "Incorrect boundary conditions in the Graphics component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00868, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16412", "url": "https://patchblox.com/security/cve/CVE-2026-16412", "title": "Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00636, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16395", "url": "https://patchblox.com/security/cve/CVE-2026-16395", "title": "Integer overflow in the Audio/Video component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00619, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16402", "url": "https://patchblox.com/security/cve/CVE-2026-16402", "title": "Integer overflow in the Graphics: ImageLib component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00619, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16408", "url": "https://patchblox.com/security/cve/CVE-2026-16408", "title": "Integer overflow in the Audio/Video: Playback component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00619, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74964", "url": "https://patchblox.com/security/cve/CVE-2026-74964", "title": "Integer overflow in the Graphics component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00595, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74989", "url": "https://patchblox.com/security/cve/CVE-2026-74989", "title": "Internally found bugs fixed in Thunderbird 154", "priority": "Urgent", "cvss": 9.8, "epss": 0.0057, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84134", "url": "https://patchblox.com/security/cve/CVE-2026-84134", "title": "Other issue in the Profile Backup component", "priority": "Urgent", "cvss": 9.8, "epss": 0.0057, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16389", "url": "https://patchblox.com/security/cve/CVE-2026-16389", "title": "Incorrect boundary conditions, integer overflow in the Libraries component in NSS", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00565, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84142", "url": "https://patchblox.com/security/cve/CVE-2026-84142", "title": "Internally found bugs fixed in Thunderbird 155", "priority": "Urgent", "cvss": 9.8, "epss": 0.00561, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16382", "url": "https://patchblox.com/security/cve/CVE-2026-16382", "title": "Mitigation bypass in the DOM: Service Workers component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00556, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74986", "url": "https://patchblox.com/security/cve/CVE-2026-74986", "title": "Site isolation issue in the CSS Parsing and Computation component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00555, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16388", "url": "https://patchblox.com/security/cve/CVE-2026-16388", "title": "Sandbox escape in the DOM: Networking component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00551, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16410", "url": "https://patchblox.com/security/cve/CVE-2026-16410", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00551, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92036", "url": "https://patchblox.com/security/cve/CVE-2026-92036", "title": "Incorrect boundary conditions in the Networking: HTTP component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00551, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92037", "url": "https://patchblox.com/security/cve/CVE-2026-92037", "title": "Incorrect boundary conditions in the DOM: Animation component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00551, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92061", "url": "https://patchblox.com/security/cve/CVE-2026-92061", "title": "Incorrect boundary conditions in the Security: Process Sandboxing component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00551, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92066", "url": "https://patchblox.com/security/cve/CVE-2026-92066", "title": "Sandbox escape in the Profile Backup component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00551, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16393", "url": "https://patchblox.com/security/cve/CVE-2026-16393", "title": "Incorrect boundary conditions in the Graphics: WebGPU component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16392", "url": "https://patchblox.com/security/cve/CVE-2026-16392", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00531, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92051", "url": "https://patchblox.com/security/cve/CVE-2026-92051", "title": "Spoofing issue due to invalid pointer in the Graphics component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00531, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74985", "url": "https://patchblox.com/security/cve/CVE-2026-74985", "title": "Privilege escalation in the Enterprise Policies component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16353", "url": "https://patchblox.com/security/cve/CVE-2026-16353", "title": "Invalid pointer in the DOM: Bindings (WebIDL) component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00517, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16407", "url": "https://patchblox.com/security/cve/CVE-2026-16407", "title": "Mitigation bypass in the DOM: Service Workers component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74956", "url": "https://patchblox.com/security/cve/CVE-2026-74956", "title": "Same-origin policy bypass in the DOM: Service Workers component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00498, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16411", "url": "https://patchblox.com/security/cve/CVE-2026-16411", "title": "Memory safety bugs fixed in Thunderbird 153", "priority": "Urgent", "cvss": 9.8, "epss": 0.00493, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16360", "url": "https://patchblox.com/security/cve/CVE-2026-16360", "title": "Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00468, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-75874", "url": "https://patchblox.com/security/cve/CVE-2026-75874", "title": "Sandbox escape in the Remote Settings Client component", "priority": "Urgent", "severity": "critical", "cvss": 10, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74961", "url": "https://patchblox.com/security/cve/CVE-2026-74961", "title": "Side-channel in the Web Audio component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16363", "url": "https://patchblox.com/security/cve/CVE-2026-16363", "title": "JIT miscompilation in the JavaScript: WebAssembly component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00436, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16369", "url": "https://patchblox.com/security/cve/CVE-2026-16369", "title": "Integer overflow in the JavaScript: WebAssembly component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00436, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16370", "url": "https://patchblox.com/security/cve/CVE-2026-16370", "title": "Mitigation bypass in the DOM: Networking component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16394", "url": "https://patchblox.com/security/cve/CVE-2026-16394", "title": "Mitigation bypass in the DOM: Security component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16406", "url": "https://patchblox.com/security/cve/CVE-2026-16406", "title": "Mitigation bypass in the Networking component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16364", "url": "https://patchblox.com/security/cve/CVE-2026-16364", "title": "Incorrect boundary conditions in the Audio/Video: Playback component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00429, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74940", "url": "https://patchblox.com/security/cve/CVE-2026-74940", "title": "Use-after-free in the Graphics: Text component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92050", "url": "https://patchblox.com/security/cve/CVE-2026-92050", "title": "Sandbox escape due to race condition in the XPConnect component", "priority": "Urgent", "cvss": 9.1, "epss": 0.0041, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16350", "url": "https://patchblox.com/security/cve/CVE-2026-16350", "title": "Incorrect boundary conditions in the Audio/Video: cubeb component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16355", "url": "https://patchblox.com/security/cve/CVE-2026-16355", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74936", "url": "https://patchblox.com/security/cve/CVE-2026-74936", "title": "Use-after-free in the JavaScript: WebAssembly component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00403, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74944", "url": "https://patchblox.com/security/cve/CVE-2026-74944", "title": "Use-after-free in the DOM: Core \u0026 HTML component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00403, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16351", "url": "https://patchblox.com/security/cve/CVE-2026-16351", "title": "Sandbox escape due to use-after-free in the DOM: Navigation component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00394, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16352", "url": "https://patchblox.com/security/cve/CVE-2026-16352", "title": "Sandbox escape due to use-after-free in the Disability Access APIs component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00394, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16356", "url": "https://patchblox.com/security/cve/CVE-2026-16356", "title": "Sandbox escape due to use-after-free in the Disability Access APIs component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00394, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12295", "url": "https://patchblox.com/security/cve/CVE-2026-12295", "title": "Sandbox escape in the DOM: Navigation component", "priority": "Urgent", "severity": "critical", "cvss": 9.6, "epss": 0.00393, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12296", "url": "https://patchblox.com/security/cve/CVE-2026-12296", "title": "Sandbox escape in the Security: Process Sandboxing component", "priority": "Urgent", "severity": "critical", "cvss": 9.6, "epss": 0.00393, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12297", "url": "https://patchblox.com/security/cve/CVE-2026-12297", "title": "Sandbox escape due to incorrect boundary conditions in the Networking component", "priority": "Urgent", "severity": "critical", "cvss": 9.6, "epss": 0.00393, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16368", "url": "https://patchblox.com/security/cve/CVE-2026-16368", "title": "Incorrect boundary conditions in the JavaScript: WebAssembly component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00388, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16377", "url": "https://patchblox.com/security/cve/CVE-2026-16377", "title": "Mitigation bypass in the PDF Viewer component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16383", "url": "https://patchblox.com/security/cve/CVE-2026-16383", "title": "Mitigation bypass in the DOM: Networking component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84143", "url": "https://patchblox.com/security/cve/CVE-2026-84143", "title": "Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00378, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16367", "url": "https://patchblox.com/security/cve/CVE-2026-16367", "title": "Sandbox escape due to invalid pointer in the Disability Access APIs component", "priority": "Urgent", "cvss": 10, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12294", "url": "https://patchblox.com/security/cve/CVE-2026-12294", "title": "Sandbox escape in the DOM: Workers component", "priority": "Urgent", "severity": "critical", "cvss": 9.6, "epss": 0.00363, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74959", "url": "https://patchblox.com/security/cve/CVE-2026-74959", "title": "Mitigation bypass in the Storage: Cache API component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00342, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92018", "url": "https://patchblox.com/security/cve/CVE-2026-92018", "title": "Sandbox escape in the DOM: Core \u0026 HTML component", "priority": "Urgent", "severity": "critical", "cvss": 9.6, "epss": 0.00328, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92032", "url": "https://patchblox.com/security/cve/CVE-2026-92032", "title": "Sandbox escape due to invalid pointer in the Graphics component", "priority": "Urgent", "severity": "critical", "cvss": 9.6, "epss": 0.00321, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84119", "url": "https://patchblox.com/security/cve/CVE-2026-84119", "title": "Sandbox escape due to use-after-free in the DOM: Navigation component", "priority": "Urgent", "severity": "critical", "cvss": 9.6, "epss": 0.00319, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84121", "url": "https://patchblox.com/security/cve/CVE-2026-84121", "title": "Sandbox escape due to use-after-free in the DOM: Security component", "priority": "Urgent", "severity": "critical", "cvss": 9.6, "epss": 0.00319, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16390", "url": "https://patchblox.com/security/cve/CVE-2026-16390", "title": "Mitigation bypass in the Enterprise Policies component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00316, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92038", "url": "https://patchblox.com/security/cve/CVE-2026-92038", "title": "Mitigation bypass in the Remote Settings Client component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00316, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92041", "url": "https://patchblox.com/security/cve/CVE-2026-92041", "title": "Mitigation bypass in the DOM: Networking component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00316, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92075", "url": "https://patchblox.com/security/cve/CVE-2026-92075", "title": "Mitigation bypass in the Networking component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00316, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16380", "url": "https://patchblox.com/security/cve/CVE-2026-16380", "title": "Mitigation bypass in the Networking component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00309, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74979", "url": "https://patchblox.com/security/cve/CVE-2026-74979", "title": "Mitigation bypass in the Add-ons Manager component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00306, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12293", "url": "https://patchblox.com/security/cve/CVE-2026-12293", "title": "Use-after-free in the Graphics: WebGPU component", "priority": "Urgent", "cvss": 9.8, "epss": 0.00302, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92045", "url": "https://patchblox.com/security/cve/CVE-2026-92045", "title": "Sandbox escape due to incorrect boundary conditions in the WebRTC component", "priority": "Urgent", "severity": "critical", "cvss": 9.6, "epss": 0.003, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92048", "url": "https://patchblox.com/security/cve/CVE-2026-92048", "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component", "priority": "Urgent", "cvss": 9, "epss": 0.00283, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92034", "url": "https://patchblox.com/security/cve/CVE-2026-92034", "title": "Site isolation issue in the Graphics component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16359", "url": "https://patchblox.com/security/cve/CVE-2026-16359", "title": "Incorrect boundary conditions in the Audio/Video: GMP component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12315", "url": "https://patchblox.com/security/cve/CVE-2026-12315", "title": "Mitigation bypass in the DOM: Security component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00251, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92057", "url": "https://patchblox.com/security/cve/CVE-2026-92057", "title": "Mitigation bypass in the Enterprise Policies component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00251, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92079", "url": "https://patchblox.com/security/cve/CVE-2026-92079", "title": "Mitigation bypass in the Widget: Win32 component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00251, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12316", "url": "https://patchblox.com/security/cve/CVE-2026-12316", "title": "Mitigation bypass in the DOM: Security component", "priority": "Urgent", "cvss": 9.1, "epss": 0.00245, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92071", "url": "https://patchblox.com/security/cve/CVE-2026-92071", "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component", "priority": "Urgent", "cvss": 9.6, "epss": 0.00239, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16358", "url": "https://patchblox.com/security/cve/CVE-2026-16358", "title": "Site isolation issue in the Graphics: WebRender component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16349", "url": "https://patchblox.com/security/cve/CVE-2026-16349", "title": "Same-origin policy bypass in the DOM: Navigation component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16375", "url": "https://patchblox.com/security/cve/CVE-2026-16375", "title": "Site isolation issue in the Networking: HTTP component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16387", "url": "https://patchblox.com/security/cve/CVE-2026-16387", "title": "Site isolation issue in the Networking component", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12304", "url": "https://patchblox.com/security/cve/CVE-2026-12304", "title": "Same-origin policy bypass in the Networking: Cookies component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16381", "url": "https://patchblox.com/security/cve/CVE-2026-16381", "title": "Same-origin policy bypass in the Networking: DNS component", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92059", "url": "https://patchblox.com/security/cve/CVE-2026-92059", "title": "Incorrect boundary conditions in the DOM: Editor component", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74945", "url": "https://patchblox.com/security/cve/CVE-2026-74945", "title": "Information disclosure in the Graphics: Text component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.0071, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74988", "url": "https://patchblox.com/security/cve/CVE-2026-74988", "title": "Internally found bugs fixed in Thunderbird ESR 153.1 and Thunderbird 154", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00609, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74977", "url": "https://patchblox.com/security/cve/CVE-2026-74977", "title": "Integer overflow in the Graphics component", "priority": "High", "cvss": 7.5, "epss": 0.006, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74990", "url": "https://patchblox.com/security/cve/CVE-2026-74990", "title": "Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00534, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74982", "url": "https://patchblox.com/security/cve/CVE-2026-74982", "title": "Denial-of-service in the Widget component", "priority": "High", "cvss": 7.5, "epss": 0.00534, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74987", "url": "https://patchblox.com/security/cve/CVE-2026-74987", "title": "Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16376", "url": "https://patchblox.com/security/cve/CVE-2026-16376", "title": "Denial-of-service in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00517, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16409", "url": "https://patchblox.com/security/cve/CVE-2026-16409", "title": "Invalid pointer in the Security: PSM component", "priority": "High", "cvss": 7.5, "epss": 0.00517, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12292", "url": "https://patchblox.com/security/cve/CVE-2026-12292", "title": "Incorrect boundary conditions in the Web Audio component", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00493, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-15718", "url": "https://patchblox.com/security/cve/CVE-2026-15718", "title": "Invalid pointer in the JavaScript: WebAssembly component", "priority": "High", "severity": "medium", "cvss": 8.8, "epss": 0.00489, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12328", "url": "https://patchblox.com/security/cve/CVE-2026-12328", "title": "Memory safety bugs fixed in Firefox ESR 115.37, Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00476, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74958", "url": "https://patchblox.com/security/cve/CVE-2026-74958", "title": "Information disclosure in the WebRTC component", "priority": "High", "cvss": 7.5, "epss": 0.00452, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74947", "url": "https://patchblox.com/security/cve/CVE-2026-74947", "title": "Privilege escalation due to invalid pointer in the Graphics component", "priority": "High", "cvss": 8.8, "epss": 0.00449, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74938", "url": "https://patchblox.com/security/cve/CVE-2026-74938", "title": "Mitigation bypass in the JavaScript: GC component", "priority": "High", "severity": "important", "cvss": 9.1, "epss": 0.00442, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74954", "url": "https://patchblox.com/security/cve/CVE-2026-74954", "title": "Information disclosure due to side-channel in the Storage: Cache API component", "priority": "High", "cvss": 7.5, "epss": 0.00439, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74966", "url": "https://patchblox.com/security/cve/CVE-2026-74966", "title": "Information disclosure in the Form Autofill component", "priority": "High", "cvss": 7.5, "epss": 0.00439, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84130", "url": "https://patchblox.com/security/cve/CVE-2026-84130", "title": "Information disclosure in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00439, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84128", "url": "https://patchblox.com/security/cve/CVE-2026-84128", "title": "Privilege escalation in the WebDriver BiDi component", "priority": "High", "cvss": 8.8, "epss": 0.00437, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74937", "url": "https://patchblox.com/security/cve/CVE-2026-74937", "title": "Use-after-free in the JavaScript: GC component", "priority": "High", "cvss": 8.8, "epss": 0.00436, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84123", "url": "https://patchblox.com/security/cve/CVE-2026-84123", "title": "Privilege escalation due to use-after-free in the Graphics: WebGPU component", "priority": "High", "cvss": 8.8, "epss": 0.00436, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16384", "url": "https://patchblox.com/security/cve/CVE-2026-16384", "title": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16385", "url": "https://patchblox.com/security/cve/CVE-2026-16385", "title": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16386", "url": "https://patchblox.com/security/cve/CVE-2026-16386", "title": "Information disclosure due to uninitialized memory in the Graphics: WebGPU component", "priority": "High", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16400", "url": "https://patchblox.com/security/cve/CVE-2026-16400", "title": "Information disclosure in the DOM: Security component", "priority": "High", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84144", "url": "https://patchblox.com/security/cve/CVE-2026-84144", "title": "Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2", "priority": "High", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92040", "url": "https://patchblox.com/security/cve/CVE-2026-92040", "title": "Use-after-free in the JavaScript: WebAssembly component", "priority": "High", "cvss": 8.8, "epss": 0.00422, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16378", "url": "https://patchblox.com/security/cve/CVE-2026-16378", "title": "Other issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component", "priority": "High", "cvss": 7.5, "epss": 0.00417, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74950", "url": "https://patchblox.com/security/cve/CVE-2026-74950", "title": "Privilege escalation in the Downloads API component", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74952", "url": "https://patchblox.com/security/cve/CVE-2026-74952", "title": "Privilege escalation in the Application Update component", "priority": "High", "cvss": 8.8, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74955", "url": "https://patchblox.com/security/cve/CVE-2026-74955", "title": "Privilege escalation in the Request Handling component", "priority": "High", "cvss": 8.8, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12327", "url": "https://patchblox.com/security/cve/CVE-2026-12327", "title": "Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00407, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16372", "url": "https://patchblox.com/security/cve/CVE-2026-16372", "title": "Privilege escalation in the DOM: Content Processes component", "priority": "High", "cvss": 8.8, "epss": 0.00406, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16366", "url": "https://patchblox.com/security/cve/CVE-2026-16366", "title": "Privilege escalation in the DOM: Navigation component", "priority": "High", "cvss": 8.8, "epss": 0.00402, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16401", "url": "https://patchblox.com/security/cve/CVE-2026-16401", "title": "Privilege escalation in the Data Loss Prevention component", "priority": "High", "cvss": 8.8, "epss": 0.00402, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12290", "url": "https://patchblox.com/security/cve/CVE-2026-12290", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00397, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74969", "url": "https://patchblox.com/security/cve/CVE-2026-74969", "title": "Use-after-free in the Layout: Text and Fonts component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00396, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12289", "url": "https://patchblox.com/security/cve/CVE-2026-12289", "title": "Privilege escalation in the Graphics: WebRender component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00395, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12291", "url": "https://patchblox.com/security/cve/CVE-2026-12291", "title": "Use-after-free in the Networking: HTTP component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00382, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74978", "url": "https://patchblox.com/security/cve/CVE-2026-74978", "title": "Clickjacking issue in the Widget component", "priority": "High", "cvss": 8.1, "epss": 0.00381, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12305", "url": "https://patchblox.com/security/cve/CVE-2026-12305", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00374, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84145", "url": "https://patchblox.com/security/cve/CVE-2026-84145", "title": "Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12326", "url": "https://patchblox.com/security/cve/CVE-2026-12326", "title": "Memory safety bugs fixed in Firefox 152 and Thunderbird 152", "priority": "High", "cvss": 8.1, "epss": 0.00363, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92005", "url": "https://patchblox.com/security/cve/CVE-2026-92005", "title": "Use-after-free in the Audio/Video: Web Codecs component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00357, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84141", "url": "https://patchblox.com/security/cve/CVE-2026-84141", "title": "Integer overflow in the Graphics: ImageLib component", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00342, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16354", "url": "https://patchblox.com/security/cve/CVE-2026-16354", "title": "Information disclosure in the Graphics: ImageLib component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00341, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-15719", "url": "https://patchblox.com/security/cve/CVE-2026-15719", "title": "Site isolation issue in the DOM: Navigation component", "priority": "High", "severity": "medium", "cvss": 8.8, "epss": 0.00339, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74946", "url": "https://patchblox.com/security/cve/CVE-2026-74946", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00334, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92035", "url": "https://patchblox.com/security/cve/CVE-2026-92035", "title": "Sandbox escape due to incorrect boundary conditions in the Graphics component", "priority": "High", "severity": "important", "cvss": 9.6, "epss": 0.00328, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84131", "url": "https://patchblox.com/security/cve/CVE-2026-84131", "title": "Privilege escalation due to invalid pointer in the Graphics component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00328, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92006", "url": "https://patchblox.com/security/cve/CVE-2026-92006", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00328, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74983", "url": "https://patchblox.com/security/cve/CVE-2026-74983", "title": "Mitigation bypass in the Data Loss Prevention component", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00328, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74971", "url": "https://patchblox.com/security/cve/CVE-2026-74971", "title": "Information disclosure in the DOM: UI Events \u0026 Focus Handling component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00324, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74941", "url": "https://patchblox.com/security/cve/CVE-2026-74941", "title": "Privilege escalation in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00323, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16374", "url": "https://patchblox.com/security/cve/CVE-2026-16374", "title": "Information disclosure in the Framework component in DevTools", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00322, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16391", "url": "https://patchblox.com/security/cve/CVE-2026-16391", "title": "Information disclosure in the Storage: IndexedDB component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00322, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92044", "url": "https://patchblox.com/security/cve/CVE-2026-92044", "title": "Information disclosure in the Networking: HTTP component", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00322, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74976", "url": "https://patchblox.com/security/cve/CVE-2026-74976", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.0032, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92022", "url": "https://patchblox.com/security/cve/CVE-2026-92022", "title": "Use-after-free in the DOM: HTML Parser component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00319, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92023", "url": "https://patchblox.com/security/cve/CVE-2026-92023", "title": "Use-after-free in the XML component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00319, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92024", "url": "https://patchblox.com/security/cve/CVE-2026-92024", "title": "Use-after-free in the SVG component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00319, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92025", "url": "https://patchblox.com/security/cve/CVE-2026-92025", "title": "Use-after-free in the DOM: Navigation component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00319, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92027", "url": "https://patchblox.com/security/cve/CVE-2026-92027", "title": "Use-after-free in the DOM: Streams component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00319, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92028", "url": "https://patchblox.com/security/cve/CVE-2026-92028", "title": "Use-after-free in the DOM: Core \u0026 HTML component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00319, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92029", "url": "https://patchblox.com/security/cve/CVE-2026-92029", "title": "Use-after-free in the SVG component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00319, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74949", "url": "https://patchblox.com/security/cve/CVE-2026-74949", "title": "Privilege escalation due to use-after-free in the Graphics: Canvas2D component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00318, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74948", "url": "https://patchblox.com/security/cve/CVE-2026-74948", "title": "Information disclosure in the Graphics component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00314, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92016", "url": "https://patchblox.com/security/cve/CVE-2026-92016", "title": "Use-after-free in the Disability Access APIs component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00312, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92026", "url": "https://patchblox.com/security/cve/CVE-2026-92026", "title": "Use-after-free in the Networking component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00312, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74935", "url": "https://patchblox.com/security/cve/CVE-2026-74935", "title": "Privilege escalation in the DOM: Networking component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0031, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92019", "url": "https://patchblox.com/security/cve/CVE-2026-92019", "title": "Mitigation bypass in the Remote Settings Client component", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00307, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12298", "url": "https://patchblox.com/security/cve/CVE-2026-12298", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00306, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12299", "url": "https://patchblox.com/security/cve/CVE-2026-12299", "title": "JIT miscompilation in the DOM: Core \u0026 HTML component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00306, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92031", "url": "https://patchblox.com/security/cve/CVE-2026-92031", "title": "Information disclosure in the Graphics: ImageLib component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00306, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74939", "url": "https://patchblox.com/security/cve/CVE-2026-74939", "title": "Privilege escalation in the DOM: Navigation component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00304, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74942", "url": "https://patchblox.com/security/cve/CVE-2026-74942", "title": "Privilege escalation in the Remote Settings Client component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00304, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74965", "url": "https://patchblox.com/security/cve/CVE-2026-74965", "title": "Privilege escalation in the Shell Integration component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00303, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-10701", "url": "https://patchblox.com/security/cve/CVE-2026-10701", "title": "Incorrect boundary conditions in the Graphics: Text component", "priority": "High", "cvss": 7.5, "epss": 0.00301, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74957", "url": "https://patchblox.com/security/cve/CVE-2026-74957", "title": "Mitigation bypass in the Safe Browsing component", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.003, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16371", "url": "https://patchblox.com/security/cve/CVE-2026-16371", "title": "Privilege escalation in the DOM: Navigation component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00297, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74953", "url": "https://patchblox.com/security/cve/CVE-2026-74953", "title": "Privilege escalation in the Networking: Cookies component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00297, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16362", "url": "https://patchblox.com/security/cve/CVE-2026-16362", "title": "Use-after-free in the WebRTC: Audio/Video component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00292, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92046", "url": "https://patchblox.com/security/cve/CVE-2026-92046", "title": "Use-after-free in the Graphics component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00292, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12317", "url": "https://patchblox.com/security/cve/CVE-2026-12317", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "cvss": 7.5, "epss": 0.00288, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16365", "url": "https://patchblox.com/security/cve/CVE-2026-16365", "title": "Privilege escalation in the DOM: Workers component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16379", "url": "https://patchblox.com/security/cve/CVE-2026-16379", "title": "Privilege escalation in the DOM: Content Processes component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12318", "url": "https://patchblox.com/security/cve/CVE-2026-12318", "title": "Incorrect boundary conditions in the Libraries component in NSS", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12306", "url": "https://patchblox.com/security/cve/CVE-2026-12306", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12307", "url": "https://patchblox.com/security/cve/CVE-2026-12307", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12308", "url": "https://patchblox.com/security/cve/CVE-2026-12308", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74972", "url": "https://patchblox.com/security/cve/CVE-2026-74972", "title": "Information disclosure in the DOM: Push Subscriptions component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92015", "url": "https://patchblox.com/security/cve/CVE-2026-92015", "title": "Privilege escalation in the WebExtensions component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0026, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92007", "url": "https://patchblox.com/security/cve/CVE-2026-92007", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92008", "url": "https://patchblox.com/security/cve/CVE-2026-92008", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92009", "url": "https://patchblox.com/security/cve/CVE-2026-92009", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92010", "url": "https://patchblox.com/security/cve/CVE-2026-92010", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92011", "url": "https://patchblox.com/security/cve/CVE-2026-92011", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92012", "url": "https://patchblox.com/security/cve/CVE-2026-92012", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92013", "url": "https://patchblox.com/security/cve/CVE-2026-92013", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92020", "url": "https://patchblox.com/security/cve/CVE-2026-92020", "title": "Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16405", "url": "https://patchblox.com/security/cve/CVE-2026-16405", "title": "Information disclosure in the Networking: WebSockets component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84132", "url": "https://patchblox.com/security/cve/CVE-2026-84132", "title": "Information disclosure in the Networking: HTTP component", "priority": "High", "severity": "important", "cvss": 7.5, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12310", "url": "https://patchblox.com/security/cve/CVE-2026-12310", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12312", "url": "https://patchblox.com/security/cve/CVE-2026-12312", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12314", "url": "https://patchblox.com/security/cve/CVE-2026-12314", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12302", "url": "https://patchblox.com/security/cve/CVE-2026-12302", "title": "Mitigation bypass in the DOM: Security component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00248, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92053", "url": "https://patchblox.com/security/cve/CVE-2026-92053", "title": "Privilege escalation in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00246, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-100832", "url": "https://patchblox.com/security/cve/CVE-2026-100832", "title": "Use-after-free in the Graphics: Canvas2D component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00245, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92054", "url": "https://patchblox.com/security/cve/CVE-2026-92054", "title": "Privilege escalation in the Memory component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00244, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16396", "url": "https://patchblox.com/security/cve/CVE-2026-16396", "title": "Privilege escalation in WebExtensions", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92017", "url": "https://patchblox.com/security/cve/CVE-2026-92017", "title": "Privilege escalation in the DOM: Service Workers component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00239, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92043", "url": "https://patchblox.com/security/cve/CVE-2026-92043", "title": "Privilege escalation due to incorrect boundary conditions in the Audio/Video component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00239, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92052", "url": "https://patchblox.com/security/cve/CVE-2026-92052", "title": "Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00239, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12309", "url": "https://patchblox.com/security/cve/CVE-2026-12309", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92049", "url": "https://patchblox.com/security/cve/CVE-2026-92049", "title": "Use-after-free in the Widget: Win32 component", "priority": "High", "cvss": 8.8, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92056", "url": "https://patchblox.com/security/cve/CVE-2026-92056", "title": "Use-after-free in the Graphics: Text component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92058", "url": "https://patchblox.com/security/cve/CVE-2026-92058", "title": "Use-after-free in the Graphics component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92060", "url": "https://patchblox.com/security/cve/CVE-2026-92060", "title": "Use-after-free in the Internationalization component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92067", "url": "https://patchblox.com/security/cve/CVE-2026-92067", "title": "Use-after-free in the Widget: Gtk component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12325", "url": "https://patchblox.com/security/cve/CVE-2026-12325", "title": "Denial-of-service in the Graphics: ImageLib component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92055", "url": "https://patchblox.com/security/cve/CVE-2026-92055", "title": "Privilege escalation in the DevTools component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00226, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92072", "url": "https://patchblox.com/security/cve/CVE-2026-92072", "title": "Incorrect boundary conditions in the Safe Browsing component", "priority": "High", "severity": "high", "cvss": 8, "epss": 0.00225, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92042", "url": "https://patchblox.com/security/cve/CVE-2026-92042", "title": "Race condition in the DOM: Content Processes component", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92047", "url": "https://patchblox.com/security/cve/CVE-2026-92047", "title": "Privilege escalation in the Crash Reporting component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00221, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92062", "url": "https://patchblox.com/security/cve/CVE-2026-92062", "title": "Privilege escalation in the Session Restore component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00221, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92073", "url": "https://patchblox.com/security/cve/CVE-2026-92073", "title": "Privilege escalation in the Enterprise Policies component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00221, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84120", "url": "https://patchblox.com/security/cve/CVE-2026-84120", "title": "Use-after-free in the Audio/Video component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92030", "url": "https://patchblox.com/security/cve/CVE-2026-92030", "title": "Mitigation bypass in the DOM: Copy \u0026 Paste and Drag \u0026 Drop component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16398", "url": "https://patchblox.com/security/cve/CVE-2026-16398", "title": "Site isolation issue in the Graphics component", "priority": "High", "cvss": 7.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16399", "url": "https://patchblox.com/security/cve/CVE-2026-16399", "title": "Site isolation issue in the DOM: Navigation component", "priority": "High", "cvss": 7.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84122", "url": "https://patchblox.com/security/cve/CVE-2026-84122", "title": "Use-after-free in the Audio/Video component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74981", "url": "https://patchblox.com/security/cve/CVE-2026-74981", "title": "Site isolation issue in the Audio/Video: Web Codecs component", "priority": "High", "cvss": 8.1, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12324", "url": "https://patchblox.com/security/cve/CVE-2026-12324", "title": "Incorrect boundary conditions in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84129", "url": "https://patchblox.com/security/cve/CVE-2026-84129", "title": "Site isolation issue in the DOM: Navigation component", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84133", "url": "https://patchblox.com/security/cve/CVE-2026-84133", "title": "Site isolation issue in the DOM: Push Subscriptions component", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12311", "url": "https://patchblox.com/security/cve/CVE-2026-12311", "title": "Information disclosure, sandbox escape in the Security: Process Sandboxing component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84140", "url": "https://patchblox.com/security/cve/CVE-2026-84140", "title": "Site isolation issue in the DOM: Navigation component", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12313", "url": "https://patchblox.com/security/cve/CVE-2026-12313", "title": "Information disclosure, sandbox escape in the Security: Process Sandboxing component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74973", "url": "https://patchblox.com/security/cve/CVE-2026-74973", "title": "Race condition, use-after-free in the Graphics component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84124", "url": "https://patchblox.com/security/cve/CVE-2026-84124", "title": "Use-after-free in the DOM: Core \u0026 HTML component", "priority": "High", "severity": "medium", "cvss": 8.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74960", "url": "https://patchblox.com/security/cve/CVE-2026-74960", "title": "Site isolation issue in the WebExtensions component", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74962", "url": "https://patchblox.com/security/cve/CVE-2026-74962", "title": "Site isolation issue in the Networking: Cookies component", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74934", "url": "https://patchblox.com/security/cve/CVE-2026-74934", "title": "Site isolation issue in the Graphics: CanvasWebGL component", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74974", "url": "https://patchblox.com/security/cve/CVE-2026-74974", "title": "Same-origin policy bypass in the Graphics: ImageLib component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74963", "url": "https://patchblox.com/security/cve/CVE-2026-74963", "title": "Same-origin policy bypass in the Networking: Cookies component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74967", "url": "https://patchblox.com/security/cve/CVE-2026-74967", "title": "Same-origin policy bypass in the Audio/Video: Playback component", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92074", "url": "https://patchblox.com/security/cve/CVE-2026-92074", "title": "Mitigation bypass in the Popup Blocker component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00109, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92076", "url": "https://patchblox.com/security/cve/CVE-2026-92076", "title": "Incorrect boundary conditions in the Networking component", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00109, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92064", "url": "https://patchblox.com/security/cve/CVE-2026-92064", "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component", "priority": "High", "cvss": 8.8, "epss": 0.00103, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92065", "url": "https://patchblox.com/security/cve/CVE-2026-92065", "title": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component", "priority": "High", "cvss": 8.8, "epss": 0.00103, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-10702", "url": "https://patchblox.com/security/cve/CVE-2026-10702", "title": "JIT miscompilation in the JavaScript Engine: JIT component", "priority": "Routine", "cvss": 4.3, "epss": 0.00856, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92063", "url": "https://patchblox.com/security/cve/CVE-2026-92063", "title": "Denial-of-service in the Audio/Video component", "priority": "Routine", "cvss": 6.5, "epss": 0.00384, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84138", "url": "https://patchblox.com/security/cve/CVE-2026-84138", "title": "Denial-of-service in the PDF Viewer component", "priority": "Routine", "cvss": 6.5, "epss": 0.00372, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16403", "url": "https://patchblox.com/security/cve/CVE-2026-16403", "title": "Spoofing issue in the Address Bar component", "priority": "Routine", "cvss": 6.5, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84139", "url": "https://patchblox.com/security/cve/CVE-2026-84139", "title": "Clickjacking issue in the DOM: Events component", "priority": "Routine", "cvss": 6.1, "epss": 0.00337, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84126", "url": "https://patchblox.com/security/cve/CVE-2026-84126", "title": "Incorrect boundary conditions in the Layout: Grid component", "priority": "Routine", "cvss": 4.3, "epss": 0.00312, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-16397", "url": "https://patchblox.com/security/cve/CVE-2026-16397", "title": "Clickjacking issue in the WebExtensions component in Firefox for Android", "priority": "Routine", "cvss": 6.5, "epss": 0.00299, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84118", "url": "https://patchblox.com/security/cve/CVE-2026-84118", "title": "Use-after-free in the JavaScript: GC component", "priority": "Routine", "cvss": 5.4, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84125", "url": "https://patchblox.com/security/cve/CVE-2026-84125", "title": "Use-after-free in the DOM: Core \u0026 HTML component", "priority": "Routine", "cvss": 5.4, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74984", "url": "https://patchblox.com/security/cve/CVE-2026-74984", "title": "Race condition in the JavaScript Engine component", "priority": "Routine", "cvss": 6.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92077", "url": "https://patchblox.com/security/cve/CVE-2026-92077", "title": "Denial-of-service in the SVG component", "priority": "Routine", "severity": "medium", "cvss": 6.5, "epss": 0.00272, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12300", "url": "https://patchblox.com/security/cve/CVE-2026-12300", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "Routine", "cvss": 5.3, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12301", "url": "https://patchblox.com/security/cve/CVE-2026-12301", "title": "Memory safety bug fixed in Thunderbird 152", "priority": "Routine", "cvss": 5.3, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12303", "url": "https://patchblox.com/security/cve/CVE-2026-12303", "title": "Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component", "priority": "Routine", "cvss": 4.3, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92078", "url": "https://patchblox.com/security/cve/CVE-2026-92078", "title": "Denial-of-service in the Security component", "priority": "Routine", "severity": "medium", "cvss": 6.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12319", "url": "https://patchblox.com/security/cve/CVE-2026-12319", "title": "Denial-of-service in the Audio/Video: Playback component", "priority": "Routine", "cvss": 6.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12322", "url": "https://patchblox.com/security/cve/CVE-2026-12322", "title": "Clickjacking issue in the Widget: Gtk component", "priority": "Routine", "cvss": 5.4, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84136", "url": "https://patchblox.com/security/cve/CVE-2026-84136", "title": "Other issue in the DOM: Navigation component", "priority": "Routine", "severity": "important", "cvss": 6.1, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92039", "url": "https://patchblox.com/security/cve/CVE-2026-92039", "title": "Mitigation bypass in the DOM: Notifications component", "priority": "Routine", "severity": "medium", "cvss": 6.3, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92070", "url": "https://patchblox.com/security/cve/CVE-2026-92070", "title": "Information disclosure in the Networking component", "priority": "Routine", "severity": "medium", "cvss": 4.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92069", "url": "https://patchblox.com/security/cve/CVE-2026-92069", "title": "Spoofing issue in the DOM: Navigation component", "priority": "Routine", "severity": "medium", "cvss": 5.4, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12320", "url": "https://patchblox.com/security/cve/CVE-2026-12320", "title": "Information disclosure in the Password Manager component", "priority": "Routine", "cvss": 4.3, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12323", "url": "https://patchblox.com/security/cve/CVE-2026-12323", "title": "Spoofing issue in the DOM: Core \u0026 HTML component", "priority": "Routine", "cvss": 5.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-12321", "url": "https://patchblox.com/security/cve/CVE-2026-12321", "title": "JIT miscompilation in the JavaScript: WebAssembly component", "priority": "Routine", "cvss": 5.4, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74968", "url": "https://patchblox.com/security/cve/CVE-2026-74968", "title": "Site isolation issue in the Graphics: WebRender component", "priority": "Routine", "severity": "important", "cvss": 5.4, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74970", "url": "https://patchblox.com/security/cve/CVE-2026-74970", "title": "Site isolation issue in the Graphics component", "priority": "Routine", "cvss": 5.4, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-84137", "url": "https://patchblox.com/security/cve/CVE-2026-84137", "title": "Spoofing issue in the DOM: Core \u0026 HTML component", "priority": "Routine", "severity": "important", "cvss": 4.3, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92068", "url": "https://patchblox.com/security/cve/CVE-2026-92068", "title": "Site isolation issue in the Reader Mode component", "priority": "Routine", "severity": "medium", "cvss": 5.4, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-08T06:59:42Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }