Firefox and Thunderbird vulnerabilities

3 known CVE vulnerabilities in Firefox and Thunderbird, translated and rated.

CVE-2026-113400Medium
An uninitialized memory vulnerability in the Audio/Video: cubeb component of Firefox and Thunderbird. The issue was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.
CVE-2026-113399Unknown
Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.
CVE-2025-13013Medium
A mitigation bypass vulnerability exists in the DOM: Core & HTML component of Firefox and Thunderbird. It was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS