Multiple vulnerabilities in Mozilla Firefox

Description

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. Security vulnerability in Firefox for Android can be exploited to bypass security restrictions.
2. A remote code execution vulnerability in the JavaScript: GC component can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in the DOM: Navigation component can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in the Audio/Video component can be exploited remotely to execute arbitrary code.
5. A remote code execution vulnerability in the DOM: Security component can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in the Graphics: WebGPU component can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in the DOM: Core & HTML component can be exploited remotely to execute arbitrary code.
8. Denial of service vulnerability in the Layout: Grid component can be exploited remotely to cause denial of service.
9. Information disclosure vulnerability in the WebExtensions component in Firefox for Android can be exploited to obtain sensitive information.
10. Security vulnerability in the WebDriver BiDi component can be exploited to bypass security restrictions.
11. Security vulnerability can be exploited to bypass security restrictions.
12. Information disclosure vulnerability in the Graphics: WebGPU component can be exploited to obtain sensitive information.
13. Denial of service vulnerability in the Graphics component can be exploited remotely to cause denial of service.
14. Information disclosure vulnerability in the Networking: HTTP component can be exploited to obtain sensitive information.
15. Denial of service vulnerability in the Profile Backup component can be exploited remotely to cause denial of service.
16. Denial of service vulnerability in Firefox Focus for Android can be exploited remotely to cause denial of service.
17. Denial of service vulnerability in the DOM: Navigation component can be exploited remotely to cause denial of service.
18. Security UI vulnerability in the DOM: Core & HTML component can be exploited to spoof user interface.
19. Denial of service vulnerability in the PDF Viewer component can be exploited remotely to cause denial of service.
20. A remote code execution vulnerability in the Graphics: ImageLib component can be exploited remotely to execute arbitrary code.

Original advisories

• MFSA2026-82

Exploitation

Related products

• Mozilla-Firefox

CVE list

• CVE-2026-84117
  critical
• CVE-2026-84118
  high
• CVE-2026-84119
  critical
• CVE-2026-84120
  high
• CVE-2026-84121
  critical
• CVE-2026-84122
  high
• CVE-2026-84123
  critical
• CVE-2026-84124
  high
• CVE-2026-84125
  high
• CVE-2026-84126
  warning
• CVE-2026-84127
  warning
• CVE-2026-84128
  critical
• CVE-2026-84129
  unknown
• CVE-2026-84130
  unknown
• CVE-2026-84131
  critical
• CVE-2026-84132
  unknown
• CVE-2026-84133
  unknown
• CVE-2026-84134
  unknown
• CVE-2026-84135
  unknown
• CVE-2026-84136
  unknown
• CVE-2026-84137
  unknown
• CVE-2026-84138
  unknown
• CVE-2026-84139
  unknown
• CVE-2026-84140
  unknown
• CVE-2026-84141
  unknown
• CVE-2026-84142
  unknown
• CVE-2026-84143
  unknown
• CVE-2026-84144
  unknown
• CVE-2026-84145
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com