Archive · Firefox
Release — Firefox · 2026-07-21
CVEs 63
| CVE | Component | Class | Severity | ITW | Fix | RCA |
|---|---|---|---|---|---|---|
| CVE-2026-16349 | Core | Cross Origin | High | — | — | — |
| CVE-2026-16350 | Toolkit | Logic Error | High | — | ● | — |
| CVE-2026-16351 | Core | UAF | High | — | ● | — |
| CVE-2026-16352 | Core | UAF | High | — | ● | — |
| CVE-2026-16353 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-16354 | ImageLib | Logic Error | High | — | ● | — |
| CVE-2026-16355 | SpiderMonkey | Logic Error | High | — | ● | — |
| CVE-2026-16356 | Core | UAF | High | — | ● | — |
| CVE-2026-16357 | Graphics | Logic Error | High | — | ● | — |
| CVE-2026-16358 | Graphics | Logic Error | Medium | — | ● | — |
| CVE-2026-16359 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16360 | Graphics | Memory Corruption | High | — | ● | — |
| CVE-2026-16362 | DOM | UAF | High | — | ● | — |
| CVE-2026-16363 | SpiderMonkey | Logic Error | High | — | ● | — |
| CVE-2026-16364 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-16365 | Core | Logic Error | High | — | — | — |
| CVE-2026-16366 | Core | Logic Error | High | — | — | — |
| CVE-2026-16367 | Core | Sandbox Escape | High | — | ● | — |
| CVE-2026-16368 | SpiderMonkey | Logic Error | High | — | ● | — |
| CVE-2026-16369 | SpiderMonkey | Integer Overflow | High | — | ● | — |
| CVE-2026-16370 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16371 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16372 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16373 | Core | Logic Error | Medium | — | ● | — |
| CVE-2026-16374 | Core | Logic Error | Medium | — | ● | — |
| CVE-2026-16375 | Networking | Logic Error | Medium | — | ● | — |
| CVE-2026-16376 | Core | Logic Error | Medium | — | — | — |
| CVE-2026-16377 | Toolkit | Logic Error | Medium | — | ● | — |
| CVE-2026-16378 | Widget | Logic Error | Medium | — | ● | — |
| CVE-2026-16379 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16380 | Networking | Logic Error | Medium | — | ● | — |
| CVE-2026-16381 | Networking | Cross Origin | Medium | — | ● | — |
| CVE-2026-16382 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16383 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16384 | Core | Uninitialized Memory | Medium | — | — | — |
| CVE-2026-16385 | Core | Uninitialized Memory | Medium | — | — | — |
| CVE-2026-16386 | Core | Uninitialized Memory | Medium | — | — | — |
| CVE-2026-16387 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16388 | DOM | Sandbox Escape | Medium | — | ● | — |
| CVE-2026-16389 | Core | Integer Overflow | Medium | — | — | — |
| CVE-2026-16390 | Core | Logic Error | Medium | — | ● | — |
| CVE-2026-16391 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16392 | SpiderMonkey | Logic Error | Medium | — | ● | — |
| CVE-2026-16393 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16394 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16395 | DOM | Integer Overflow | Medium | — | ● | — |
| CVE-2026-16396 | Core | Logic Error | Medium | — | — | — |
| CVE-2026-16397 | Core | Logic Error | Medium | — | ● | — |
| CVE-2026-16398 | Core | Logic Error | Medium | — | ● | — |
| CVE-2026-16399 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16400 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16401 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-16402 | ImageLib | Integer Overflow | Medium | — | ● | — |
| CVE-2026-16403 | Core | Logic Error | Low | — | — | — |
| CVE-2026-16404 | Core | Logic Error | Low | — | ● | — |
| CVE-2026-16405 | Networking | Logic Error | Low | — | ● | — |
| CVE-2026-16406 | Networking | Logic Error | Low | — | ● | — |
| CVE-2026-16407 | DOM | Logic Error | Low | — | ● | — |
| CVE-2026-16408 | DOM | Integer Overflow | Low | — | ● | — |
| CVE-2026-16409 | Security/NSS | Logic Error | Low | — | ● | — |
| CVE-2026-16410 | SpiderMonkey | Logic Error | Low | — | ● | — |
| CVE-2026-16411 | DOM | Memory Corruption | High | — | ● | — |
| CVE-2026-16412 | SpiderMonkey | Memory Corruption | High | — | ● | — |