2026-10-27

CVE-2026-118023 Oct 27, 14:17 Awaiting Data

Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159.

CVE-2026-118022 Oct 27, 14:16 Awaiting Data

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159.

CVE-2026-118021 Oct 27, 14:16 Awaiting Data

Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159.

CVE-2026-118020 Oct 27, 14:16 Awaiting Data

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159.

CVE-2026-118019 Oct 27, 14:16 Awaiting Data

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159.

CVE-2026-118018 Oct 27, 14:16 Awaiting Data

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.

CVE-2026-118017 Oct 27, 14:16 Awaiting Data

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159.

CVE-2026-118016 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159.

CVE-2026-118015 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159.

CVE-2026-118014 Oct 27, 14:16 Awaiting Data

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159.

CVE-2026-118013 Oct 27, 14:16 Awaiting Data

Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159.

CVE-2026-118012 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159.

CVE-2026-118011 Oct 27, 14:16 Awaiting Data

Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159.

CVE-2026-118010 Oct 27, 14:16 Awaiting Data

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159.

CVE-2026-118009 Oct 27, 14:16 Awaiting Data

Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159.

CVE-2026-118007 Oct 27, 14:16 Awaiting Data

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159.

CVE-2026-118006 Oct 27, 14:16 Awaiting Data

Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159.

CVE-2026-118005 Oct 27, 14:16 Awaiting Data

Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159.

CVE-2026-118004 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-118003 Oct 27, 14:16 Awaiting Data

Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-118002 Oct 27, 14:16 Awaiting Data

Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-118000 Oct 27, 14:16 Awaiting Data

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117999 Oct 27, 14:16 Awaiting Data

Race condition in the IPC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117998 Oct 27, 14:16 Awaiting Data

Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117997 Oct 27, 14:16 Awaiting Data

Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117996 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117995 Oct 27, 14:16 Awaiting Data

Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117994 Oct 27, 14:16 Awaiting Data

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117993 Oct 27, 14:16 Awaiting Data

Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117992 Oct 27, 14:16 Awaiting Data

Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117991 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117990 Oct 27, 14:16 Awaiting Data

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117989 Oct 27, 14:16 Awaiting Data

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117988 Oct 27, 14:16 Awaiting Data

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117987 Oct 27, 14:16 Awaiting Data

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117986 Oct 27, 14:16 Awaiting Data

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117985 Oct 27, 14:16 Awaiting Data

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117984 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117983 Oct 27, 14:16 Awaiting Data

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117982 Oct 27, 14:16 Awaiting Data

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117981 Oct 27, 14:16 Awaiting Data

Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117980 Oct 27, 14:16 Awaiting Data

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117979 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117978 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117977 Oct 27, 14:16 Awaiting Data

Other issue in the Console component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117976 Oct 27, 14:16 Awaiting Data

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117975 Oct 27, 14:16 Awaiting Data

Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117974 Oct 27, 14:16 Awaiting Data

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117973 Oct 27, 14:16 Awaiting Data

Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117972 Oct 27, 14:16 Awaiting Data

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.