CVEs

410,407 total · page 124 of 8,209

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-118009	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118008	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118007	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118006	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118005	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118004	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118003	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118002	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118000	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117999	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117998	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117997	Mozilla Corporation Firefox	Cri	0.62	9.6	0.00	Oct 27, 2026	Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117996	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117995	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117994	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117993	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117992	Mozilla Corporation Firefox	Med	0.42	6.5	0.00	Oct 27, 2026	Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117991	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117990	Mozilla Corporation Firefox	Cri	0.62	9.6	0.00	Oct 27, 2026	Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117989	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117988	Mozilla Corporation Firefox	Cri	0.62	9.6	0.00	Oct 27, 2026	Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117987	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117986	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117985	Mozilla Corporation Firefox	Cri	0.62	9.6	0.00	Oct 27, 2026	Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117984	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117983	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117982	Mozilla Corporation Firefox	Cri	0.64	9.8	0.01	Oct 27, 2026	Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117981	Mozilla Corporation Firefox	Cri	0.64	9.8	0.00	Oct 27, 2026	Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117980	Mozilla Corporation Firefox	Cri	0.64	9.8	0.00	Oct 27, 2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117979	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117978	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117977	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Other issue in the Console component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117976	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117975	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117974	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117973	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117972	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117971	Mozilla Corporation Firefox	Cri	0.62	9.6	0.00	Oct 27, 2026	Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117970	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117969	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117968	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117967	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117966	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117965	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117964	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117963	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117962	Mozilla Corporation Firefox	Cri	0.62	9.6	0.00	Oct 27, 2026	Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117961	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117960	Mozilla Corporation Firefox	Med	0.31	4.7	0.00	Oct 27, 2026	Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117959	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

CVE-2026-118009HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118008HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118007HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118006HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118005HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118004HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118003HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118002HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118000HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117999HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117998HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117997CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.62cvss 9.6epss 0.00
Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117996HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117995HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117994HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117993HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117992MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.42cvss 6.5epss 0.00
Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117991HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117990CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.62cvss 9.6epss 0.00
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117989HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117988CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.62cvss 9.6epss 0.00
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117987HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117986HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117985CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.62cvss 9.6epss 0.00
Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117984HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117983HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117982CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.64cvss 9.8epss 0.01
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117981CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.64cvss 9.8epss 0.00
Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117980CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.64cvss 9.8epss 0.00
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117979HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117978HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117977HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Other issue in the Console component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117976HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117975HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117974HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117973HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117972HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117971CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.62cvss 9.6epss 0.00
Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117970HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117969HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117968HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117967HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117966HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117965HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117964HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117963HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117962CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.62cvss 9.6epss 0.00
Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117961HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117960MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.31cvss 4.7epss 0.00
Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117959HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.