| CVE-2026-16383 | NGHIÊM TRỌNG9.8 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | 21/07/2026 |
| CVE-2026-16382 | NGHIÊM TRỌNG9.8 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | 21/07/2026 |
| CVE-2026-16381 | NGHIÊM TRỌNG9.1 | Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | 21/07/2026 |
| CVE-2026-16380 | NGHIÊM TRỌNG9.1 | Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | 21/07/2026 |
| CVE-2026-16379 | CAO8.8 | Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | 21/07/2026 |
| CVE-2026-16378 | CAO7.5 | Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | 21/07/2026 |
| CVE-2026-16377 | NGHIÊM TRỌNG9.8 | Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | 21/07/2026 |
| CVE-2026-16376 | CAO7.5 | Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | 21/07/2026 |
| CVE-2026-16375 | NGHIÊM TRỌNG9.8 | Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | 21/07/2026 |
| CVE-2026-16374 | CAO7.5 | Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | 21/07/2026 |
| CVE-2026-16372 | CAO8.8 | Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | 21/07/2026 |
| CVE-2026-16371 | CAO8.8 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, Thunderbird 140.13, Firefox ESR 140.15, and Thunderbird 140.15. | 21/07/2026 |
| CVE-2026-16370 | NGHIÊM TRỌNG9.1 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | 21/07/2026 |
| CVE-2026-16369 | NGHIÊM TRỌNG9.8 | Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | 21/07/2026 |
| CVE-2026-16368 | NGHIÊM TRỌNG9.8 | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | 21/07/2026 |
| CVE-2026-16367 | NGHIÊM TRỌNG10.0 | Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | 21/07/2026 |
| CVE-2026-16366 | CAO8.8 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | 21/07/2026 |
| CVE-2026-16365 | CAO8.8 | Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153, Thunderbird 153, Firefox ESR 140.15, and Thunderbird 140.15. | 21/07/2026 |
| CVE-2026-16364 | NGHIÊM TRỌNG9.1 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | 21/07/2026 |
| CVE-2026-16363 | NGHIÊM TRỌNG9.8 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | 21/07/2026 |