CVEs

410,413 total · page 126 of 8,209

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2026-117914	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117913	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117912	Mozilla Corporation Firefox	Hig	0.53	8.1	Oct 27, 2026	Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117911	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117910	Mozilla Corporation Firefox	Hig	0.47	7.3	Oct 27, 2026	Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117909	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117908	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117907	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117906	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117905	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117904	Mozilla Corporation Firefox	Hig	0.57	8.8	Oct 27, 2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117903	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117902	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117901	Mozilla Corporation Firefox	Hig	0.57	8.8	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117900	Mozilla Corporation Firefox	Hig	0.57	8.8	Oct 27, 2026	Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117899	Mozilla Corporation Firefox	Hig	0.57	8.8	Oct 27, 2026	Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117898	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117897	Mozilla Corporation Firefox	Hig	0.47	7.3	Oct 27, 2026	Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117896	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117895	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117894	Mozilla Corporation Firefox	Med	0.35	5.4	Oct 27, 2026	Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117893	Mozilla Corporation Firefox	Med	0.35	5.4	Oct 27, 2026	Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117892	Mozilla Corporation Firefox	Hig	0.47	7.3	Oct 27, 2026	Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117891	Mozilla Corporation Firefox	Hig	0.47	7.3	Oct 27, 2026	Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117890	Mozilla Corporation Firefox	Hig	0.47	7.3	Oct 27, 2026	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117889	Mozilla Corporation Firefox	Hig	0.47	7.3	Oct 27, 2026	Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117888	Mozilla Corporation Firefox	Med	0.35	5.4	Oct 27, 2026	Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117887	Mozilla Corporation Firefox	Hig	0.57	8.8	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117886	Mozilla Corporation Firefox	Hig	0.53	8.1	Oct 27, 2026	Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117885	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117884	Mozilla Corporation Firefox	Hig	0.57	8.8	Oct 27, 2026	Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117883	Mozilla Corporation Firefox	Hig	0.57	8.8	Oct 27, 2026	Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117882	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117881	Mozilla Corporation Firefox	Hig	0.57	8.8	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117880	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117879	Mozilla Corporation Firefox	Hig	0.47	7.3	Oct 27, 2026	Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117878	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117877	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117876	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117875	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117874	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117873	Mozilla Corporation Firefox	Hig	0.53	8.1	Oct 27, 2026	Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117872	Mozilla Corporation Firefox	Hig	0.57	8.8	Oct 27, 2026	Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117871	Mozilla Corporation Firefox	Hig	0.47	7.3	Oct 27, 2026	Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117870	Mozilla Corporation Firefox	Hig	0.47	7.3	Oct 27, 2026	Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117869	Mozilla Corporation Firefox	Hig	0.57	8.8	Oct 27, 2026	Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117868	Mozilla Corporation Firefox	Cri	0.62	9.6	Oct 27, 2026	Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117867	Mozilla Corporation Firefox	Hig	0.47	7.3	Oct 27, 2026	Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117866	Mozilla Corporation Firefox	Hig	0.47	7.3	Oct 27, 2026	Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117865	Mozilla Corporation Firefox	Med	0.41	6.3	Oct 27, 2026	Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

CVE-2026-117914MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117913MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117912HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117911MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117910HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117909MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117908MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117907MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117906MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117905MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117904HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117903MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117902MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117901HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117900HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117899HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117898MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117897HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117896MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117895MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117894MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.35cvss 5.4epss 0.00
Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117893MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.35cvss 5.4epss 0.00
Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117892HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117891HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117890HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117889HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117888MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.35cvss 5.4epss 0.00
Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117887HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117886HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117885MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117884HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117883HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117882MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117881HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117880MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117879HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117878MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117877MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117876MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117875MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117874MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117873HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.53cvss 8.1epss 0.00
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117872HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117871HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117870HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117869HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.57cvss 8.8epss 0.00
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117868CriOct 27, 2026
Mozilla Corporation
Firefox
risk 0.62cvss 9.6epss 0.00
Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117867HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117866HigOct 27, 2026
Mozilla Corporation
Firefox
risk 0.47cvss 7.3epss 0.00
Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117865MedOct 27, 2026
Mozilla Corporation
Firefox
risk 0.41cvss 6.3epss 0.00
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.