MGASA-2026-0492

Heap buffer overflow opening large email. (CVE-2026-103500) Incorrect boundary conditions in the Audio/Video: Playback component. (CVE-2026-100756) Use-after-free in the Widget component. (CVE-2026-100757) Sandbox escape in the DOM: Navigation component. (CVE-2026-100758) Uninitialized memory in the Storage: Quota Manager component. (CVE-2026-100759) Sandbox escape in the Security: Process Sandboxing component. (CVE-2026-100760) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100762) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100765) Information disclosure in the Networking: JAR component. (CVE-2026-100766) Use-after-free in the Networking: Cache component. (CVE-2026-100767) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100769) Sandbox escape due to use-after-free in the DOM: Content Processes component. (CVE-2026-100770) Undefined behavior in the DOM: Streams component. (CVE-2026-100771) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100772) Use-after-free in the Storage: IndexedDB component. (CVE-2026-100773) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100774) Sandbox escape in the Graphics component. (CVE-2026-100775) Use-after-free in the JavaScript: WebAssembly component. (CVE-2026-100776) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100777) Sandbox escape due to use-after-free in the DOM: Core & HTML component. (CVE-2026-100778) Use-after-free in the XSLT component. (CVE-2026-100779) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100780) Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. (CVE-2026-100781) Privilege escalation due to incorrect boundary conditions in the Graphics component. (CVE-2026-100782) Uninitialized memory in the Audio/Video component. (CVE-2026-100783) Use-after-free in the Layout: Text and Fonts component. (CVE-2026-100784) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100785) Sandbox escape due to use-after-free in the Graphics component. (CVE-2026-100786) Sandbox escape in the XUL component. (CVE-2026-100787) Invalid pointer in the JavaScript: WebAssembly component. (CVE-2026-100788) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100789) Use-after-free in the XSLT component. (CVE-2026-100790) Use-after-free in the DOM: Core & HTML component. (CVE-2026-100791) Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100832) JIT miscompilation in the JavaScript: WebAssembly component. (CVE-2026-100792) Sandbox escape due to incorrect boundary conditions in the Internationalization component. (CVE-2026-100794) Information disclosure in the Networking component. (CVE-2026-96869) Privilege escalation due to use-after-free in the Graphics: WebRender component. (CVE-2026-100797) Cryptography misuse in Storage: Quota Manager component. (CVE-2026-100798) Sandbox escape due to use-after-free in the Disability Access APIs component. (CVE-2026-100800) Privilege escalation in the DLL Services component. (CVE-2026-100801) Same-origin policy bypass in the WebExtensions component. (CVE-2026-100803) Uninitialized memory in the Graphics: WebGPU component. (CVE-2026-100806) Privilege escalation in the DOM: Service Workers component. (CVE-2026-100807) Mitigation bypass in the DOM: Service Workers component. (CVE-2026-100808) Same-origin policy bypass in the DevTools component. (CVE-2026-100809) Sandbox escape due to use-after-free in the DOM: Core & HTML component. (CVE-2026-100811) Denial-of-service in the Graphics component. (CVE-2026-100812) Incorrect boundary conditions in the JavaScript Engine: JIT component. (CVE-2026-100814) Use-after-free in the CSS Parsing and Computation component. (CVE-2026-100815) Site isolation issue in the DOM: Networking component. (CVE-2026-100816) Sandbox escape due to use-after-free in the Widget: Gtk component. (CVE-2026-100818) Sandbox escape due to incorrect boundary conditions in the XPCOM component. (CVE-2026-100819) Privilege escalation in the Address Bar component. (CVE-2026-100820) Site isolation issue in the Panning and Zooming component. (CVE-2026-100821) Spoofing issue in the Networking: HTTP component. (CVE-2026-100822) Privilege escalation in the Places component. (CVE-2026-100824) Use-after-free in the JavaScript Engine: JIT component. (CVE-2026-100825) Denial-of-service in the Storage: StorageManager component. (CVE-2026-100826) Mitigation bypass in the Bookmarks & History component. (CVE-2026-100828) Mitigation bypass in the DOM: Security component. (CVE-2026-100829) Mitigation bypass in the DOM: Navigation component. (CVE-2026-100830) Use-after-free in the DOM: UI Events & Focus Handling component. (CVE-2026-100831)