Mozilla

Use-after-free in the DOM: UI Events & Focus Handling component

Denial-of-service in the Storage: StorageManager component

Privilege escalation in the Places component

Uninitialized memory in the Graphics: WebGPU component

Sandbox escape due to use-after-free in the Disability Access APIs component

Use-after-free in the JavaScript: WebAssembly component

Sandbox escape due to incorrect boundary conditions in the XPCOM component

Privilege escalation in the DLL Services component

Privilege escalation due to use-after-free in the Graphics: WebRender component

Use-after-free in the Graphics: Canvas2D component