Security Vulnerabilities
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVSS Score
9.8
EPSS Score
0.004
Published
2026-07-21
Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVSS Score
9.8
EPSS Score
0.002
Published
2026-07-21
Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVSS Score
9.8
EPSS Score
0.004
Published
2026-07-21
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVSS Score
7.5
EPSS Score
0.003
Published
2026-07-21
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVSS Score
7.5
EPSS Score
0.003
Published
2026-07-21
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVSS Score
7.5
EPSS Score
0.003
Published
2026-07-21
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-07-21
Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-07-21
Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153.
CVSS Score
7.5
EPSS Score
0.003
Published
2026-07-21
Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVSS Score
7.5
EPSS Score
0.003
Published
2026-07-21