| CVE-2026-6778 | MOYENNE5.3 | Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | 21/04/2026 |
| CVE-2026-6777 | MOYENNE5.3 | Other issue in the Networking: DNS component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | 21/04/2026 |
| CVE-2026-6776 | ÉLEVÉE7.8 | Incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6775 | MOYENNE5.3 | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | 21/04/2026 |
| CVE-2026-6774 | MOYENNE5.4 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | 21/04/2026 |
| CVE-2026-6773 | ÉLEVÉE7.5 | Denial-of-service due to integer overflow in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | 21/04/2026 |
| CVE-2026-6772 | ÉLEVÉE7.5 | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6771 | CRITIQUE9.8 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6770 | MOYENNE6.5 | Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6769 | ÉLEVÉE8.8 | Privilege escalation in the Debugger component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6768 | CRITIQUE9.8 | Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | 21/04/2026 |
| CVE-2026-6767 | MOYENNE5.3 | Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6766 | ÉLEVÉE7.5 | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6765 | MOYENNE5.3 | Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6764 | MOYENNE6.5 | Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6763 | MOYENNE6.5 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6762 | MOYENNE6.3 | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6761 | ÉLEVÉE8.8 | Privilege escalation in the Networking component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |
| CVE-2026-6760 | CRITIQUE9.8 | Mitigation bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | 21/04/2026 |
| CVE-2026-6759 | ÉLEVÉE7.5 | Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | 21/04/2026 |