BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Mozilla

Security Vulnerabilities fixed in Firefox 158

MFSA2026-106 Oct 13, 2026 Source: Vendor

Imported from Mozilla security advisory MFSA2026-106. Draft.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

77 lines
All 77 CVEs 77 Additional recognition 0 Unclaimed only
Showing 1–50 of 77 , page 1 of 2
CVE-2026-109704 BR2026-0000-033884 unclaimed
High: Privilege escalation in the Application Update component
Credited as Noel
CVE-2026-109705 BR2026-0000-033885 unclaimed
High: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component
Credited as Mozilla
CVE-2026-109706 BR2026-0000-033886 unclaimed
High: Use-after-free in the Storage: IndexedDB component
Credited as Mozilla
CVE-2026-109707 BR2026-0000-033887 unclaimed
High: Sandbox escape due to use-after-free in the Networking component
Credited as Mozilla
CVE-2026-109708 BR2026-0000-033888 unclaimed
High: Sandbox escape due to incorrect boundary conditions in the Networking component
Credited as Mozilla
CVE-2026-109709 BR2026-0000-033889 unclaimed
High: Information disclosure, privilege escalation in the Security: Process Sandboxing component
Credited as Yaqoub Aldurayhim
CVE-2026-109710 BR2026-0000-033890 unclaimed
High: Use-after-free in the Graphics: Text component
Credited as Mozilla
CVE-2026-109711 BR2026-0000-033891 unclaimed
High: Use-after-free in the Graphics: Canvas2D component
Credited as Mozilla
CVE-2026-109712 BR2026-0000-033892 unclaimed
High: Sandbox escape due to uninitialized memory in the Graphics component
Credited as Mozilla
CVE-2026-109713 BR2026-0000-033893 unclaimed
High: Use-after-free in the Crash Reporting component
Credited as locust1b
CVE-2026-109714 BR2026-0000-033894 unclaimed
High: Incorrect boundary conditions in the Layout component
Credited as Irvan Kurniawan
CVE-2026-109715 BR2026-0000-033895 unclaimed
High: Incorrect boundary conditions in the JavaScript Engine component
Credited as Amy Burnett of OpenAI
CVE-2026-109716 BR2026-0000-033896 unclaimed
High: Incorrect boundary conditions in the JavaScript Engine component
Credited as Amy Burnett of OpenAI
CVE-2026-109717 BR2026-0000-033897 unclaimed
High: Use-after-free in the DOM: Bindings (WebIDL) component
Credited as Mozilla
CVE-2026-109718 BR2026-0000-033898 unclaimed
High: Use-after-free in the XML component
Credited as Mozilla
CVE-2026-109719 BR2026-0000-033899 unclaimed
High: Race condition, use-after-free in the Graphics: CanvasWebGL component
Credited as Shu Takahashi of Velcore Consulting Inc.
CVE-2026-109720 BR2026-0000-033900 unclaimed
High: JIT miscompilation in the JavaScript: WebAssembly component
Credited as Amy Burnett of OpenAI
CVE-2026-109721 BR2026-0000-033901 unclaimed
High: Incorrect boundary conditions in the JavaScript Engine: JIT component
Credited as Amy Burnett of OpenAI
CVE-2026-109722 BR2026-0000-033902 unclaimed
High: JIT miscompilation in the JavaScript Engine: JIT component
Credited as Amy Burnett of OpenAI
CVE-2026-109723 BR2026-0000-033903 unclaimed
High: Integer overflow in the Layout: Text and Fonts component
Credited as Amy Burnett of OpenAI
CVE-2026-109724 BR2026-0000-033904 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-109725 BR2026-0000-033905 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-109726 BR2026-0000-033906 unclaimed
High: Use-after-free in the SVG component
Credited as Mozilla
CVE-2026-109727 BR2026-0000-033907 unclaimed
High: Use-after-free in the Audio/Video component
Credited as Mozilla
CVE-2026-109728 BR2026-0000-033908 unclaimed
High: Use-after-free in the DOM: Animation component
Credited as Amy Burnett of OpenAI
CVE-2026-109729 BR2026-0000-033909 unclaimed
High: Use-after-free in the JavaScript Engine: JIT component
Credited as Tomer Fichman
CVE-2026-109730 BR2026-0000-033910 unclaimed
High: Integer overflow in the Graphics component
Credited as Robert Longson
CVE-2026-109731 BR2026-0000-033911 unclaimed
High: Incorrect boundary conditions in the Graphics: Canvas2D component
Credited as Amy Burnett of OpenAI
CVE-2026-109732 BR2026-0000-033912 unclaimed
High: Use-after-free in the DOM: Streams component
Credited as Mozilla
CVE-2026-109733 BR2026-0000-033913 unclaimed
High: JIT miscompilation in the JavaScript Engine: JIT component
Credited as Amy Burnett of OpenAI
CVE-2026-109734 BR2026-0000-033914 unclaimed
Moderate: Mitigation bypass in the DOM: Security component
Credited as Mirko Brodesser
CVE-2026-109735 BR2026-0000-033915 unclaimed
Moderate: Use-after-free in the DOM: Animation component
Credited as Mozilla
CVE-2026-109736 BR2026-0000-033916 unclaimed
Moderate: Frame poisoning in the Layout component
Credited as Mozilla
CVE-2026-109737 BR2026-0000-033917 unclaimed
Moderate: Mitigation bypass in the Enterprise Policies component
Credited as Souma Ohsawa
CVE-2026-109738 BR2026-0000-033918 unclaimed
Moderate: Use-after-free in the Audio/Video: Playback component
Credited as Mozilla
CVE-2026-109739 BR2026-0000-033919 unclaimed
Moderate: Privilege escalation in the WebExtensions component
Credited as Tomoya Nakanishi
CVE-2026-109740 BR2026-0000-033920 unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
Credited as Mozilla
CVE-2026-109741 BR2026-0000-033921 unclaimed
Moderate: Use-after-free in the Storage: Bucket File System component
Credited as Mozilla
CVE-2026-109742 BR2026-0000-033922 unclaimed
Moderate: Information disclosure in the PDF Viewer component
Credited as Mozilla
CVE-2026-109743 BR2026-0000-033923 unclaimed
Moderate: Privilege escalation in the Panning and Zooming component
Credited as Mozilla
CVE-2026-109744 BR2026-0000-033924 unclaimed
Moderate: Other issue in the DOM: File component
Credited as Mozilla
CVE-2026-109745 BR2026-0000-033925 unclaimed
Moderate: Sandbox escape due to uninitialized memory in the DOM: Web Serial component
Credited as Mozilla
CVE-2026-109746 BR2026-0000-033926 unclaimed
Moderate: Mitigation bypass in the DOM: Security component
Credited as hamayanhamayan
CVE-2026-109747 BR2026-0000-033927 unclaimed
Moderate: Other issue in the Address Bar component
Credited as Mozilla
CVE-2026-109748 BR2026-0000-033928 unclaimed
Moderate: Use-after-free in the JavaScript: WebAssembly component
Credited as Mozilla
CVE-2026-109749 BR2026-0000-033929 unclaimed
Moderate: Use-after-free in the JavaScript: WebAssembly component
Credited as Mozilla
CVE-2026-109750 BR2026-0000-033930 unclaimed
Moderate: Site isolation issue in the DOM: Web Authentication component
Credited as cl0und
CVE-2026-109751 BR2026-0000-033931 unclaimed
Moderate: Information disclosure in the Networking component
Credited as Mozilla
CVE-2026-109752 BR2026-0000-033932 unclaimed
Moderate: Use-after-free in the DOM: Workers component
Credited as Mozilla
CVE-2026-109753 BR2026-0000-033933 unclaimed
Moderate: Incorrect boundary conditions in the Layout component
Credited as Mozilla