← All credits
Andrew McCreight
9 vulnerability records and advisories credit this contributor.
CVE-2026-0881
Sandbox escape in the Messaging System component
CVE-2025-2857
Incorrect handle could lead to sandbox escapes
CVE-2025-1414
Memory safety bugs fixed in Firefox 135.0.1
CVE-2025-0237
WebChannel APIs susceptible to confused deputy attack
CVE-2025-4085
Potential information leakage and privilege escalation in UITour actor
CVE-2025-14326
Use-after-free in the Audio/Video: GMP component
CVE-2025-4093
Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10
CVE-2023-3600
Use-after-free in workers
CVE-2024-0742
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunde