That looks like it could (partially) be an artifact of a policy change:
>Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.
108 CVE high fixed and there's even been a few release since they began releasing updates every other week
That looks like it could (partially) be an artifact of a policy change:
>Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.
https://www.mozilla.org/en-US/security/advisories/mfsa2026-1...
for a list of them.