CVEs

410,407 total · page 125 of 8,209

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-117958	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117957	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117956	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117955	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117954	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117953	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117952	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117951	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117950	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117949	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117948	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117947	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117946	Mozilla Corporation Firefox	Cri	0.64	9.8	0.01	Oct 27, 2026	Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117945	Mozilla Corporation Firefox	Cri	0.64	9.8	0.01	Oct 27, 2026	Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117944	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117943	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117942	Mozilla Corporation Firefox	Hig	0.47	7.3	0.00	Oct 27, 2026	Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117941	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117940	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117939	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117938	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117937	Mozilla Corporation Firefox	Hig	0.47	7.3	0.00	Oct 27, 2026	Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117936	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117935	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117934	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117933	Mozilla Corporation Firefox	Med	0.35	5.4	0.00	Oct 27, 2026	Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117932	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117931	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117930	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117929	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117928	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117927	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117926	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117925	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117924	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117923	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117922	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117921	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117920	Mozilla Corporation Firefox	Cri	0.62	9.6	0.00	Oct 27, 2026	Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117919	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117918	Mozilla Corporation Firefox	Hig	0.57	8.8	0.00	Oct 27, 2026	Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117917	Mozilla Corporation Firefox	Cri	0.64	9.8	0.01	Oct 27, 2026	Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117916	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117915	Mozilla Corporation Firefox	Hig	0.47	7.3	0.00	Oct 27, 2026	Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117914	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117913	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117912	Mozilla Corporation Firefox	Hig	0.53	8.1	0.00	Oct 27, 2026	Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117911	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117910	Mozilla Corporation Firefox	Hig	0.47	7.3	0.00	Oct 27, 2026	Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117909	Mozilla Corporation Firefox	Med	0.41	6.3	0.00	Oct 27, 2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

CVE-2026-117958HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117957HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117956HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117955HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117954HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117953HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117952HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117951HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117950HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117949HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117948MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117947MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117946CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.64cvss 9.8epss 0.01
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117945CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.64cvss 9.8epss 0.01
Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117944MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117943HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117942HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117941HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117940HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117939MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117938MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117937HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117936HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117935MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117934MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117933MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.35cvss 5.4epss 0.00
Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117932HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117931HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117930HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117929HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117928HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117927MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117926HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117925HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117924MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117923MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117922HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117921HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117920CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.62cvss 9.6epss 0.00
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117919HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117918HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117917CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.64cvss 9.8epss 0.01
Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117916MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117915HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117914MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117913MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117912HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117911MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117910HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117909MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.