Firefox ESR — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical Vulnerabilities in Firefox and Thunderbird Require Immediate Patching

  Multiple critical vulnerabilities have been identified in Firefox and Thunderbird, specifically CVE-2026-4720, CVE-2026-4710, and CVE-2026-4705, all published on March 24, 2026. These vulnerabilities involve memory…

  4 articles · Updated March 25, 2026
• SUSE Releases Critical Memory Safety Patches for Firefox and Thunderbird

  On April 14 and 16, 2026, SUSE released important updates for Mozilla Firefox and Thunderbird addressing multiple memory safety vulnerabilities. The updates include fixes for CVE-2026-5731, CVE-2026-5732, and…

  13 articles · Updated April 16, 2026
• Multiple Use-After-Free Vulnerabilities Affect Firefox and Thunderbird

  Two vulnerabilities have been identified affecting Firefox and Thunderbird. CVE-2023-3600, published on July 12, 2023, could lead to a crash during the worker lifecycle for versions below Firefox 115.0.2 and Thunderbird…

  7 articles · Updated February 18, 2026
• Microsoft January 2026 Patch Tuesday Addresses 114 Vulnerabilities

  On January 10, 2026, Microsoft released its Patch Tuesday updates, fixing 114 vulnerabilities, including three classified as zero-day flaws. These updates affect various Microsoft products and are crucial for…

  61 articles · Updated January 14, 2026

Recent Intelligence Reports

• SUSE 15 SP7 MozillaFirefox Important Memory Safety Patch 2026-1322 — Linuxsecurity · April 14, 2026
• CVE-2026-4710 - Exploits & Severity — Feedly · March 25, 2026
• CVE-2023-6856 The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121. — Api.Msrc.Microsoft · February 18, 2026
• January 2026 Microsoft Patch Tuesday: Actively exploited zero day needs attention — Csoonline · January 14, 2026

Related Entities