PatchFirst · Latest vulnerabilities

mozjs68 vulnerabilities · Page 16

Vulnerabilities published for mozjs68 in the last 30 days: 257. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 1552

CVE-2026-100788
Critical · CVSS 9.8EPSS 0.41%No fix published
Invalid pointer in the JavaScript: WebAssembly component
Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated October 1, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100787
Critical · CVSS 9.6EPSS 0.3%No fix published
Sandbox escape in the XUL component
Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
mozjs68 Operating systems
Published September 29, 2026Updated October 1, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100786
Critical · CVSS 9.6EPSS 0.32%No fix published
Sandbox escape due to use-after-free in the Graphics component
Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100785
High · CVSS 8.8EPSS 0.32%No fix published
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100784
High · CVSS 8.8EPSS 0.33%No fix published
Use-after-free in the Layout: Text and Fonts component
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100783
Medium · CVSS 4.3EPSS 0.35%No fix published
Uninitialized memory in the Audio/Video component
Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100782
High · CVSS 8.8EPSS 0.26%No fix published
Privilege escalation due to incorrect boundary conditions in the Graphics component
Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100781
Critical · CVSS 9.6EPSS 0.33%No fix published
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated October 1, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100780
High · CVSS 8.8EPSS 0.32%No fix published
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100779
High · CVSS 8.8EPSS 0.33%No fix published
Use-after-free in the XSLT component
Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100778
Critical · CVSS 9.6EPSS 0.32%No fix published
Sandbox escape due to use-after-free in the DOM: Core & HTML component
Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100777
High · CVSS 8.8EPSS 0.32%No fix published
Use-after-free in the Graphics: Canvas2D component
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100776
High · CVSS 8.8EPSS 0.31%No fix published
Use-after-free in the JavaScript: WebAssembly component
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100775
Critical · CVSS 9.6EPSS 0.33%No fix published
Sandbox escape in the Graphics component
Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated October 1, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100774
High · CVSS 8.8EPSS 0.32%No fix published
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100773
High · CVSS 8.8EPSS 0.4%No fix published
Use-after-free in the Storage: IndexedDB component
Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100772
High · CVSS 8.8EPSS 0.31%No fix published
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100771
High · CVSS 8.1EPSS 0.31%No fix published
Undefined behavior in the DOM: Streams component
Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated October 1, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100770
Critical · CVSS 9.6EPSS 0.32%No fix published
Sandbox escape due to use-after-free in the DOM: Content Processes component
Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-100769
High · CVSS 8.8EPSS 0.32%No fix published
Use-after-free in the JavaScript: WebAssembly component
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
mozjs68 Operating systems
Published September 29, 2026Updated September 30, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →

mozjs68 vulnerabilities · Page 16

Invalid pointer in the JavaScript: WebAssembly component

Sandbox escape in the XUL component

Sandbox escape due to use-after-free in the Graphics component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the Layout: Text and Fonts component

Uninitialized memory in the Audio/Video component

Privilege escalation due to incorrect boundary conditions in the Graphics component

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the XSLT component

Sandbox escape due to use-after-free in the DOM: Core & HTML component

Use-after-free in the Graphics: Canvas2D component

Use-after-free in the JavaScript: WebAssembly component

Sandbox escape in the Graphics component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the Storage: IndexedDB component

Use-after-free in the DOM: Core & HTML component

Undefined behavior in the DOM: Streams component

Sandbox escape due to use-after-free in the DOM: Content Processes component

Use-after-free in the JavaScript: WebAssembly component

Check your server