| | CVE-2026-2777 |  Red Hat | high | 7.5 | 0.1%
| ✓ Fix | Privilege escalation in the Messaging System component. This vulnerability affects Firefox < 148, Fi… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2776 | Red Hat | high | 7.5 | 0.1%
| ✓ Fix | Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software.… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2778 | Red Hat | high | 7.5 | 0.1%
| ✓ Fix | Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerab… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2780 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | Privilege escalation in the Netmonitor component. This vulnerability affects Firefox < 148, Firefox … | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2779 | Red Hat | medium | 6.1 | 0.1%
| ✓ Fix | Incorrect boundary conditions in the Networking: JAR component. This vulnerability affects Firefox <… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2781 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | Integer overflow in the Libraries component in NSS. This vulnerability affects Firefox < 148, Firefo… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2782 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | Privilege escalation in the Netmonitor component. This vulnerability affects Firefox < 148, Firefox … | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2783 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulne… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2784 | Red Hat | medium | 6.1 | 0.1%
| ✓ Fix | Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 148, Firefox … | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2786 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 148, Firefox… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2785 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | Invalid pointer in the JavaScript Engine component. This vulnerability affects Firefox < 148, Firefo… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2787 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | Use-after-free in the DOM: Window and Location component. This vulnerability affects Firefox < 148, … | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2789 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | Use-after-free in the Graphics: ImageLib component. This vulnerability affects Firefox < 148, Firefo… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2788 | Red Hat | medium | 6.1 | 0.1%
| ✓ Fix | Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability affects Firefox … | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2790 | Red Hat | low | 3.4 | 0.0%
| ✓ Fix | Same-origin policy bypass in the Networking: JAR component. This vulnerability affects Firefox < 148… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2791 | Red Hat | low | 3.4 | 0.1%
| ✓ Fix | Mitigation bypass in the Networking: Cache component. This vulnerability affects Firefox < 148, Fire… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2792 | Red Hat | high | 7.5 | 0.1%
| ✓ Fix | Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird … | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2793 | Red Hat | high | 7.5 | 0.1%
| ✓ Fix | Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox … | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2794 | Red Hat | high | 7.5 | 0.0%
| | Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vu… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2795 | Red Hat | high | 7.5 | 0.0%
| | Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox < 148 and Thunder… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2796 | Red Hat | high | 7.5 | 0.1%
| | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 14… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2797 | Red Hat | high | 7.5 | 0.0%
| | Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox < 148 and Thunder… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2798 | Red Hat | high | 7.5 | 0.0%
| | Use-after-free in the DOM: Core & HTML component. This vulnerability affects Firefox < 148 and Thund… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2799 | Red Hat | high | 7.5 | 0.0%
| | Use-after-free in the DOM: Core & HTML component. This vulnerability affects Firefox < 148 and Thund… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2800 | Red Hat | medium | 6.1 | 0.1%
| | Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability affects Firefox … | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2801 | Red Hat | medium | 6.1 | 0.1%
| | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects F… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2802 | Red Hat | medium | 6.1 | 0.0%
| | Race condition in the JavaScript: GC component. This vulnerability affects Firefox < 148 and Thunder… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2803 | Red Hat | medium | 6.1 | 0.1%
| | Information disclosure, mitigation bypass in the Settings UI component. This vulnerability affects F… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2804 | Red Hat | medium | 6.1 | 0.0%
| | Use-after-free in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 148 an… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2805 | Red Hat | medium | 6.1 | 0.1%
| | Invalid pointer in the DOM: Core & HTML component. This vulnerability affects Firefox < 148 and Thun… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2806 | Red Hat | low | 3.4 | 0.1%
| | Uninitialized memory in the Graphics: Text component. This vulnerability affects Firefox < 148 and T… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-2807 | Red Hat | high | 7.5 | 0.1%
| | Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-27571 | Red Hat | medium | 7.5 | 0.1%
| | NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The … | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2025-14963 |  Trellix | high | 7.8 | 0.0%
| | A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local … | Feb 24, 2026 | Feb 26, 2026 |
| | CVE-2026-27195 | Red Hat | medium | 4.7 | 0.1%
| | Wasmtime is a runtime for WebAssembly. Starting with Wasmtime 39.0.0, the `component-model-async` fe… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-27204 | Red Hat | medium | 6.3 | 0.1%
| | Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0,… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-27572 | Red Hat | medium | 6.3 | 0.1%
| | Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0,… | Feb 24, 2026 | Feb 24, 2026 |
| | CVE-2026-27606 | Red Hat | high | 9.1 | 0.6%
| | Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollu… | Feb 25, 2026 | Feb 25, 2026 |
| | CVE-2026-27628 | Red Hat | medium | 7.5 | 0.0%
| | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this v… | Feb 25, 2026 | Feb 25, 2026 |
| | CVE-2026-3184 | Red Hat | low | 3.7 | — | | No description is available for this CVE. | Feb 25, 2026 | Feb 25, 2026 |
| | CVE-2026-26103 | Red Hat | high | 7.1 | 0.0%
| ✓ Fix | A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for res… | Feb 25, 2026 | Feb 25, 2026 |
| | CVE-2026-26104 | Red Hat | medium | 5.5 | 0.0%
| ✓ Fix | A flaw was found in the udisks storage management daemon that allows unprivileged users to back up L… | Feb 25, 2026 | Feb 25, 2026 |
| | CVE-2026-3190 | Red Hat | medium | 4.3 | — | | No description is available for this CVE. | Feb 25, 2026 | Feb 25, 2026 |
| | CVE-2025-11563 | Red Hat | medium | 6.5 | 0.0%
| | URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into
saving the output file out… | Feb 25, 2026 | Feb 25, 2026 |
| | CVE-2026-21725 |  Grafana | low | 2.6 | 0.2%
| | A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sou… | Feb 25, 2026 | Aug 12, 2026 |
| | CVE-2026-3201 | Red Hat | medium | 5.5 | 0.0%
| | USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows … | Feb 25, 2026 | Feb 25, 2026 |
| | CVE-2026-3202 | Red Hat | medium | 5.5 | 0.0%
| | NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service | Feb 25, 2026 | Feb 25, 2026 |
| | CVE-2026-3203 | Red Hat | medium | 5.5 | 0.0%
| | RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial… | Feb 25, 2026 | Feb 25, 2026 |
| | CVE-2026-27699 | Red Hat | high | 7.5 | 0.1%
| | The `basic-ftp` FTP client library for Node.js contains a path traversal vulnerability (CWE-22) in v… | Feb 25, 2026 | Feb 25, 2026 |
| | CVE-2026-27727 | Red Hat | high | 8.3 | 0.1%
| ✓ Fix | mchange-commons-java, a library that provides Java utilities, includes code that mirrors early imple… | Feb 25, 2026 | Feb 25, 2026 |