PatchFirst · Latest vulnerabilities

mozjs52 vulnerabilities · Page 25

Vulnerabilities published for mozjs52 in the last 30 days: 257. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 1727

CVE-2026-74962
High · CVSS 8.1EPSS 0.22%No fix published
Site isolation issue in the Networking: Cookies component
Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 19, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74960
High · CVSS 8.1EPSS 0.22%No fix published
Site isolation issue in the WebExtensions component
Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74959
Critical · CVSS 9.1EPSS 0.48%No fix published
Mitigation bypass in the Storage: Cache API component
Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74957
High · CVSS 8.1EPSS 0.43%No fix published
Mitigation bypass in the Safe Browsing component
Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74953
High · CVSS 8.8EPSS 0.44%No fix published
Privilege escalation in the Networking: Cookies component
Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74949
High · CVSS 8.8EPSS 0.47%No fix published
Use-after-free in the Graphics: Canvas2D component
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated October 28, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74948
Medium · CVSS 6.5EPSS 0.44%No fix published
Information disclosure in the Graphics component
Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74946
High · CVSS 8.8EPSS 0.5%No fix published
Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated October 28, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74945
Medium · CVSS 6.5EPSS 0.44%No fix published
Information disclosure in the Graphics: Text component
Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74944
Critical · CVSS 9.8EPSS 0.59%No fix published
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74943
Critical · CVSS 9.8EPSS 0.61%No fix published
Use-after-free in the Graphics: ImageLib component
Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74942
High · CVSS 8.8EPSS 0.45%No fix published
Privilege escalation in the Remote Settings Client component
Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74941
High · CVSS 8.8EPSS 0.48%No fix published
Privilege escalation in the Graphics: CanvasWebGL component
Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74940
Critical · CVSS 9.8EPSS 0.61%No fix published
Use-after-free in the Graphics: Text component
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74939
High · CVSS 8.8EPSS 0.45%No fix published
Privilege escalation in the DOM: Navigation component
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74936
Critical · CVSS 9.8EPSS 0.59%No fix published
Use-after-free in the JavaScript: WebAssembly component
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74935
High · CVSS 8.8EPSS 0.45%No fix published
Privilege escalation in the DOM: Networking component
Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-74934
High · CVSS 7.5EPSS 0.21%No fix published
Site isolation issue in the Graphics: CanvasWebGL component
Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
mozjs52 Operating systems
Published August 18, 2026Updated August 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-18809
Medium · CVSS 6.5EPSS 0.36%No fix published
Information disclosure in Firefox for Android and Firefox Focus for Android
Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3.
mozjs52 Operating systems
Published August 4, 2026Updated August 4, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-16360
Critical · CVSS 9.8EPSS 0.61%No fix published
Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153
Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
mozjs52 Operating systems
Published July 21, 2026Updated October 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →

mozjs52 vulnerabilities · Page 25

Site isolation issue in the Networking: Cookies component

Site isolation issue in the WebExtensions component

Mitigation bypass in the Storage: Cache API component

Mitigation bypass in the Safe Browsing component

Privilege escalation in the Networking: Cookies component

Use-after-free in the Graphics: Canvas2D component

Information disclosure in the Graphics component

Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Information disclosure in the Graphics: Text component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the Graphics: ImageLib component

Privilege escalation in the Remote Settings Client component

Privilege escalation in the Graphics: CanvasWebGL component

Use-after-free in the Graphics: Text component

Privilege escalation in the DOM: Navigation component

Use-after-free in the JavaScript: WebAssembly component

Privilege escalation in the DOM: Networking component

Site isolation issue in the Graphics: CanvasWebGL component

Information disclosure in Firefox for Android and Firefox Focus for Android

Memory safety bugs fixed in Thunderbird ESR 140.13 and Thunderbird 153

Check your server