CWE-368
CVEs classified under CWE-368, newest first.
3 CVEsRSS
CVE-2026-92050Critical· 9.1⚖ disputedSandbox escape due to race condition in the XPConnect component
Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
▾ Midnightmozilla · firefoxEPSS 0.41%via NVD
CVE-2026-92055High· 8.8⚖ disputedPrivilege escalation in the DevTools component
Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
▾ Twilightmozilla · firefoxEPSS 0.23%via NVD
CVE-2025-38169High· 7.8⚖ disputedIn the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with SME, a thread's kernel FPSIMD state may be erroneously clobbered during a context switch …
In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with SME, a thread's kernel FPSIMD state may be erroneously clobbered during a context switch …
▾ Twilightlinux · linux_kernelEPSS 0.17%via NVD