PatchFirst · Latest vulnerabilities

mozjs102 vulnerabilities · Page 36

Vulnerabilities published for mozjs102 in the last 30 days: 257. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 1190

CVE-2026-4721
Critical · CVSS 9.8EPSS 0.44%No fix published
Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated July 15, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4729
Critical · CVSS 9.8EPSS 0.34%No fix published
Memory safety bugs fixed in Firefox 149 and Thunderbird 149
Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
mozjs102 Operating systems
Published March 24, 2026Updated July 15, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4720
Critical · CVSS 9.8EPSS 0.44%No fix published
Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated July 15, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4719
High · CVSS 7.5EPSS 0.45%No fix published
Incorrect boundary conditions in the Graphics: Text component
Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4718
High · CVSS 8.1EPSS 0.48%No fix published
Undefined behavior in the WebRTC: Signaling component
Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4728
Medium · CVSS 6.5EPSS 0.24%No fix published
Spoofing issue in the Privacy: Anti-Tracking component
Spoofing issue in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4727
High · CVSS 7.5EPSS 0.55%No fix published
Denial-of-service in the Libraries component in NSS
Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4726
High · CVSS 7.5EPSS 0.55%No fix published
Denial-of-service in the XML component
Denial-of-service in the XML component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4717
Critical · CVSS 9.8EPSS 0.43%No fix published
Privilege escalation in the Netmonitor component
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4716
Critical · CVSS 9.1EPSS 0.42%No fix published
Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component
Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4715
Critical · CVSS 9.1EPSS 0.45%No fix published
Uninitialized memory in the Graphics: Canvas2D component
Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4714
High · CVSS 7.5EPSS 0.45%No fix published
Incorrect boundary conditions in the Audio/Video component
Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4713
High · CVSS 7.5EPSS 0.45%No fix published
Incorrect boundary conditions in the Graphics component
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4712
High · CVSS 7.5EPSS 0.4%No fix published
Information disclosure in the Widget: Cocoa component
Information disclosure in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4725
Critical · CVSS 9.3EPSS 0.33%No fix published
Sandbox escape due to use-after-free in the Graphics: Canvas2D component
Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4711
Critical · CVSS 9.8EPSS 0.41%No fix published
Use-after-free in the Widget: Cocoa component
Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4710
Critical · CVSS 9.8EPSS 0.43%No fix published
Incorrect boundary conditions in the Audio/Video component
Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4709
High · CVSS 7.5EPSS 0.48%No fix published
Incorrect boundary conditions in the Audio/Video: GMP component
Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4708
High · CVSS 7.5EPSS 0.45%No fix published
Incorrect boundary conditions in the Graphics component
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-4707
High · CVSS 7.5EPSS 0.6%No fix published
Incorrect boundary conditions in the Graphics: Canvas2D component
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.
mozjs102 Operating systems
Published March 24, 2026Updated April 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →

mozjs102 vulnerabilities · Page 36

Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

Memory safety bugs fixed in Firefox 149 and Thunderbird 149

Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

Incorrect boundary conditions in the Graphics: Text component

Undefined behavior in the WebRTC: Signaling component

Spoofing issue in the Privacy: Anti-Tracking component

Denial-of-service in the Libraries component in NSS

Denial-of-service in the XML component

Privilege escalation in the Netmonitor component

Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component

Uninitialized memory in the Graphics: Canvas2D component

Incorrect boundary conditions in the Audio/Video component

Incorrect boundary conditions in the Graphics component

Information disclosure in the Widget: Cocoa component

Sandbox escape due to use-after-free in the Graphics: Canvas2D component

Use-after-free in the Widget: Cocoa component

Incorrect boundary conditions in the Audio/Video component

Incorrect boundary conditions in the Audio/Video: GMP component

Incorrect boundary conditions in the Graphics component

Incorrect boundary conditions in the Graphics: Canvas2D component

Check your server