Multiple vulnerabilities in Mozilla Firefox

Description

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. Security vulnerability in the Application Update component can be exploited to bypass security restrictions.
2. A remote code execution vulnerability in the Networking component can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in the Storage: IndexedDB component can be exploited remotely to execute arbitrary code.
4. Denial of service vulnerability in the Networking component can be exploited remotely to cause denial of service.
5. Security vulnerability in the Security: Process Sandboxing component can be exploited to bypass security restrictions.
6. A remote code execution vulnerability in the Graphics: Text component can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in the Graphics: Canvas2D component can be exploited remotely to execute arbitrary code.
8. Denial of service vulnerability in the Graphics component can be exploited remotely to cause denial of service.
9. A remote code execution vulnerability in the Crash Reporting component can be exploited remotely to execute arbitrary code.
10. Denial of service vulnerability in the Layout component can be exploited remotely to cause denial of service.
11. Denial of service vulnerability in the JavaScript Engine component can be exploited remotely to cause denial of service.
12. A remote code execution vulnerability in the DOM: Bindings (WebIDL) component can be exploited remotely to execute arbitrary code.
13. A remote code execution vulnerability in the XML component can be exploited remotely to execute arbitrary code.
14. A remote code execution vulnerability in the Graphics: CanvasWebGL component can be exploited remotely to execute arbitrary code.
15. Security vulnerability can be exploited to bypass security restrictions.
16. Denial of service vulnerability in the JavaScript Engine: JIT component can be exploited remotely to cause denial of service.
17. A remote code execution vulnerability in the Layout: Text and Fonts component can be exploited remotely to execute arbitrary code.
18. A remote code execution vulnerability in the DOM: Core & HTML component can be exploited remotely to execute arbitrary code.
19. A remote code execution vulnerability in the SVG component can be exploited remotely to execute arbitrary code.
20. A remote code execution vulnerability in the Audio/Video component can be exploited remotely to execute arbitrary code.
21. A remote code execution vulnerability in the DOM: Animation component can be exploited remotely to execute arbitrary code.
22. A remote code execution vulnerability in the JavaScript Engine: JIT component can be exploited remotely to execute arbitrary code.
23. A remote code execution vulnerability in the Graphics component can be exploited remotely to execute arbitrary code.
24. Denial of service vulnerability in the Graphics: Canvas2D component can be exploited remotely to cause denial of service.
25. A remote code execution vulnerability in the DOM: Streams component can be exploited remotely to execute arbitrary code.
26. Security vulnerability in the DOM: Security component can be exploited to bypass security restrictions.
27. Security vulnerability in the Enterprise Policies component can be exploited to bypass security restrictions.
28. A remote code execution vulnerability in the Audio/Video: Playback component can be exploited remotely to execute arbitrary code.
29. Security vulnerability in the WebExtensions component can be exploited to bypass security restrictions.
30. Denial of service vulnerability in the Widget: Win32 component can be exploited remotely to cause denial of service.
31. A remote code execution vulnerability in the Storage: Bucket File System component can be exploited remotely to execute arbitrary code.
32. Information disclosure vulnerability in the PDF Viewer component can be exploited to obtain sensitive information.
33. Security vulnerability in the Panning and Zooming component can be exploited to bypass security restrictions.
34. Denial of service vulnerability in the DOM: File component can be exploited remotely to cause denial of service.
35. Denial of service vulnerability in the DOM: Web Serial component can be exploited remotely to cause denial of service.
36. Denial of service vulnerability in the Address Bar component can be exploited remotely to cause denial of service.
37. A remote code execution vulnerability in the JavaScript: WebAssembly component can be exploited remotely to execute arbitrary code.
38. Information disclosure vulnerability in the Networking component can be exploited to obtain sensitive information.
39. A remote code execution vulnerability in the DOM: Workers component can be exploited remotely to execute arbitrary code.
40. Denial of service vulnerability in the DOM: Editor component can be exploited remotely to cause denial of service.
41. Security vulnerability in the DOM: Content Processes component can be exploited to bypass security restrictions.
42. Security vulnerability in the DOM: Navigation component can be exploited to bypass security restrictions.
43. Security vulnerability in the Networking: HTTP component can be exploited to bypass security restrictions.
44. Denial of service vulnerability in the SVG component can be exploited remotely to cause denial of service.
45. Security vulnerability in the File Handling component can be exploited to bypass security restrictions.
46. Denial of service vulnerability in the Site Reports component can be exploited remotely to cause denial of service.
47. Information disclosure vulnerability in the Networking: Cache component can be exploited to obtain sensitive information.
48. Security UI vulnerability in the DOM: Web Serial component can be exploited to spoof user interface.
49. Information disclosure vulnerability in the WebRTC: Networking component can be exploited to obtain sensitive information.
50. Security vulnerability in the DevTools component can be exploited to bypass security restrictions.
51. Denial of service vulnerability in the Sync component can be exploited remotely to cause denial of service.
52. Denial of service vulnerability in the DOM: Notifications component can be exploited remotely to cause denial of service.
53. Denial of service vulnerability in the WebRTC component can be exploited remotely to cause denial of service.
54. A remote code execution vulnerability in the XPCOM component can be exploited remotely to execute arbitrary code.
55. Information disclosure vulnerability in the Storage: IndexedDB component can be exploited to obtain sensitive information.
56. A remote code execution vulnerability in the Networking: DNS component can be exploited remotely to execute arbitrary code.
57. Security vulnerability in the DOM: Core & HTML component can be exploited to bypass security restrictions.
58. Denial of service vulnerability in the Printing: Output component can be exploited remotely to cause denial of service.

Fiches de renseignement originales

• MFSA2026-106

Produits associés

• Mozilla-Firefox

Liste CVE

• CVE-2026-109704
  unknown
• CVE-2026-109705
  critical
• CVE-2026-109706
  high
• CVE-2026-109707
  critical
• CVE-2026-109708
  unknown
• CVE-2026-109709
  critical
• CVE-2026-109710
  high
• CVE-2026-109711
  high
• CVE-2026-109712
  unknown
• CVE-2026-109713
  high
• CVE-2026-109714
  unknown
• CVE-2026-109715
  unknown
• CVE-2026-109716
  unknown
• CVE-2026-109717
  high
• CVE-2026-109718
  high
• CVE-2026-109719
  warning
• CVE-2026-109720
  unknown
• CVE-2026-109721
  unknown
• CVE-2026-109722
  unknown
• CVE-2026-109723
  unknown
• CVE-2026-109724
  high
• CVE-2026-109725
  high
• CVE-2026-109726
  high
• CVE-2026-109727
  high
• CVE-2026-109728
  high
• CVE-2026-109729
  high
• CVE-2026-109730
  unknown
• CVE-2026-109731
  unknown
• CVE-2026-109732
  high
• CVE-2026-109733
  unknown
• CVE-2026-109734
  unknown
• CVE-2026-109735
  high
• CVE-2026-109736
  unknown
• CVE-2026-109737
  unknown
• CVE-2026-109738
  high
• CVE-2026-109739
  unknown
• CVE-2026-109740
  unknown
• CVE-2026-109741
  high
• CVE-2026-109742
  warning
• CVE-2026-109743
  unknown
• CVE-2026-109744
  unknown
• CVE-2026-109745
  unknown
• CVE-2026-109746
  unknown
• CVE-2026-109747
  unknown
• CVE-2026-109748
  high
• CVE-2026-109749
  high
• CVE-2026-109750
  unknown
• CVE-2026-109751
  warning
• CVE-2026-109752
  high
• CVE-2026-109753
  unknown
• CVE-2026-109754
  unknown
• CVE-2026-109755
  unknown
• CVE-2026-109756
  critical
• CVE-2026-109757
  unknown
• CVE-2026-109759
  unknown
• CVE-2026-109760
  unknown
• CVE-2026-109761
  high
• CVE-2026-109762
  unknown
• CVE-2026-109763
  unknown
• CVE-2026-109764
  unknown
• CVE-2026-109765
  warning
• CVE-2026-109766
  unknown
• CVE-2026-109767
  warning
• CVE-2026-109768
  high
• CVE-2026-109769
  warning
• CVE-2026-109770
  unknown
• CVE-2026-109771
  warning
• CVE-2026-109772
  unknown
• CVE-2026-109773
  high
• CVE-2026-109774
  unknown
• CVE-2026-109775
  high
• CVE-2026-109776
  unknown
• CVE-2026-109777
  warning
• CVE-2026-109778
  critical
• CVE-2026-109779
  warning
• CVE-2026-109780
  unknown
• CVE-2026-109781
  high

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com