Researchers
Back
Tomoya Nakanishi
#1787
of 60,391
148.2
Total CVSS
Vulnerabilities
·
16
High
8
Critical
8
PT-2026-111460
2026-10-13
8.8
CVE-2026-109739
Mozilla
Thunderbird
Privilege escalation exists within the WebExtensions component, which allows extensions to gain higher permissions than intended.
PT-2026-102596
2026-09-29
10
CVE-2026-100822
Mozilla
Firefox Esr
A spoofing issue exists within the Networking: HTTP component.
PT-2026-84181
2026-09-01
8.8
CVE-2026-84128
Mozilla
Firefox
Privilege escalation exists in the WebDriver BiDi component. WebDriver BiDi is a protocol that allows for bidirectional communication between the browser and the automation tool.
PT-2026-77012
2026-08-18
9.8
CVE-2026-74979
Mozilla
Firefox Esr
A mitigation bypass exists within the Add-ons Manager component.
PT-2026-76985
2026-08-18
8.8
CVE-2026-74952
Mozilla
Thunderbird
Privilege escalation exists within the Application Update component.
PT-2026-76987
2026-08-18
7.5
CVE-2026-74954
Mozilla
Firefox Esr
Information disclosure occurs due to a side-channel in the Storage: Cache API component. A side-channel is a method of extracting information from a system by observing its physical or operational behavior rather than exploiting a direct software bug.
PT-2026-76990
2026-08-18
9.8
CVE-2026-74957
Mozilla
Thunderbird
A mitigation bypass exists within the Safe Browsing component.
PT-2026-76991
2026-08-18
7.5
CVE-2026-74958
Mozilla
Firefox Esr
An information disclosure issue exists within the WebRTC component, which is a framework that enables real-time communication (voice, video, and data) between browsers.
PT-2026-61901
2026-07-21
9.8
CVE-2026-16389
Mozilla
Nss
An integer overflow occurs in the Libraries component of NSS due to incorrect boundary conditions. An integer overflow is a condition where an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of digits.
PT-2026-61903
2026-07-21
10
CVE-2026-16391
Mozilla
Thunderbird
An information disclosure issue exists within the Storage: IndexedDB component. IndexedDB is a low-level API for client-side storage of significant amounts of structured data.
PT-2026-61862
2026-07-21
10
CVE-2026-16350
Mozilla
Thunderbird
Incorrect boundary conditions exist within the Audio/Video: cubeb component. Boundary conditions are the limits or edges of a valid range of values for a variable or input.
PT-2026-61886
2026-07-21
10
CVE-2026-16374
Mozilla
Firefox Esr
An information disclosure issue exists within the Framework component of DevTools.
PT-2026-49695
2026-06-16
7.6
CVE-2026-12326
Mozilla
Thunderbird
Memory safety bugs exist that exhibit evidence of memory corruption. These issues could potentially be exploited to execute arbitrary code.
PT-2026-41906
2026-05-19
10
CVE-2026-8952
Mozilla
Firefox
A privilege escalation issue exists within the Application Update component.
PT-2026-33949
2026-04-21
9.8
CVE-2026-6763
Mozilla
Firefox
A mitigation bypass exists within the File Handling component.
PT-2026-33955
2026-04-21
10
CVE-2026-6769
Mozilla
Thunderbird
Privilege escalation exists in the Debugger component.