raxsec.
We study how systems fail to help you make them stronger. Security research and authorized red team services, grounded in evidence.
From the internals of software to the systems around it, we turn security questions into actionable findings.
Focused investigation of software and its security boundaries. We examine design assumptions, analyze vulnerabilities, and translate research into practical remediation.
Objective-led, authorized assessments of your defenses. We work within an agreed scope to examine exposure, evaluate response, and identify opportunities to improve.
| CVE ID | Finding / Component | CVSS | Published |
|---|---|---|---|
| CVE-2026-100811Published | Use-after-free / sandbox escapeDOM: Core & HTMLProducts: Firefox, Thunderbird Research area: Memory safety Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.6critical | |
| CVE-2026-100803Published | Same-origin policy bypassWebExtensionsProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 8.1high | |
| CVE-2026-100768Published | Use-after-freeGraphics: WebGPUProducts: Firefox, Thunderbird Research area: Memory safety Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 8.8high | |
| CVE-2026-100762Published | Use-after-free / sandbox escapeDOM: Content ProcessesProducts: Firefox, Thunderbird Research area: Memory safety Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.6critical | |
| CVE-2026-84129Published | Site isolation issueDOM: NavigationProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.8critical | |
| CVE-2026-84125Published | Use-after-freeDOM: Core & HTMLProducts: Firefox, Thunderbird Research area: Memory safety Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 5.4medium | |
| CVE-2026-84123Published | Use-after-free / privilege escalationGraphics: WebGPUProducts: Firefox, Thunderbird Research area: Memory safety Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 8.8high | |
| CVE-2026-84121Published | Use-after-free / sandbox escapeDOM: SecurityProducts: Firefox, Thunderbird Research area: Memory safety Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.6critical | |
| CVE-2026-84119Published | Use-after-free / sandbox escapeDOM: NavigationProducts: Firefox, Thunderbird Research area: Memory safety Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.6critical | |
| CVE-2026-74962Published | Site isolation issueNetworking: CookiesProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 8.1high | |
| CVE-2026-74948Published | Information disclosureGraphicsProducts: Firefox, Thunderbird Research area: Information disclosure Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 6.5medium | |
| CVE-2026-74935Published | Privilege escalationDOM: NetworkingProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 8.8high | |
| CVE-2026-16405Published | Information disclosureNetworking: WebSocketsProducts: Firefox, Thunderbird Research area: Information disclosure Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 7.5high | |
| CVE-2026-16399Published | Site isolation issueDOM: NavigationProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 7.5high | |
| CVE-2026-16388Published | Sandbox escapeDOM: NetworkingProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.8critical | |
| CVE-2026-16382Published | Mitigation bypassDOM: Service WorkersProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.8critical | |
| CVE-2026-16351Published | Use-after-free / sandbox escapeDOM: NavigationProducts: Firefox, Thunderbird Research area: Memory safety Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.8critical | |
| CVE-2026-12311Published | Information disclosure, sandbox escapeSecurity: Process SandboxingProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 4.7medium | |
| CVE-2026-12309Published | Memory safety bug fixed in Firefox 152Firefox · Memory safetyProducts: Firefox, Thunderbird Research area: Memory safety Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 6.5medium | |
| CVE-2026-12304Published | Same-origin policy bypassNetworking: CookiesProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.1critical | |
| CVE-2026-12296Published | Sandbox escapeSecurity: Process SandboxingProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.6critical | |
| CVE-2026-12295Published | Sandbox escapeDOM: NavigationProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.6critical | |
| CVE-2026-8958Published | Information disclosure, sandbox escapeSecurity: Process SandboxingProducts: Firefox, Thunderbird Research area: Security boundaries Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 8.6high | |
| CVE-2026-8956Published | Integer overflowNetworking: JARProducts: Firefox, Thunderbird Research area: Memory safety Credited researcher: Yaqoub Aldurayhim Score source: CISA-ADP · CVSS 3.1 Read Mozilla advisory | 9.8critical |
Try another CVE ID, component, or keyword.
I founded RaxSec around a simple principle: understanding a system deeply is the first step toward securing it. My public research includes browser security vulnerabilities and contributions recognized by Mozilla.
RaxSec brings that research perspective to security R&D and red team engagements, with clear scope, documented findings, and practical recommendations.
View my public research credits