Use-after-free in the Graphics component

Use-after-free in the Graphics: Text component

Privilege escalation in the DevTools component

Privilege escalation in the Memory component

Privilege escalation in the Graphics: CanvasWebGL component

Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component

Use-after-free in the Widget: Win32 component

Privilege escalation in the Crash Reporting component

Use-after-free in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Audio/Video component

Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the SVG component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Streams component

Use-after-free in the Networking component

Use-after-free in the DOM: Navigation component

Use-after-free in the SVG component

Use-after-free in the XML component

Use-after-free in the DOM: HTML Parser component

Use-after-free in the JavaScript Engine: JIT component

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

Privilege escalation in the DOM: Service Workers component

Use-after-free in the Disability Access APIs component

Privilege escalation in the WebExtensions component

Privilege escalation due to incorrect boundary conditions in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation in the WebDriver BiDi component

Privilege escalation due to use-after-free in the Graphics: WebGPU component

Privilege escalation due to invalid pointer in the Graphics component

Privilege escalation in the Request Handling component

Privilege escalation in the Application Update component

Privilege escalation in the Downloads API component

Privilege escalation due to invalid pointer in the Graphics component

Use-after-free in the JavaScript: GC component

Race condition, use-after-free in the Layout: Text and Fonts component

Privilege escalation in the Shell Integration component

Privilege escalation in the Networking: Cookies component

Use-after-free in the Graphics: Canvas2D component

Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation in the Remote Settings Client component

Privilege escalation in the Graphics: CanvasWebGL component

Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Networking component