2026-10-27

CVE-2026-117971 Oct 27, 14:16 Awaiting Data

Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117970 Oct 27, 14:16 Awaiting Data

Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117969 Oct 27, 14:16 Awaiting Data

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117968 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117967 Oct 27, 14:16 Awaiting Data

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117966 Oct 27, 14:16 Awaiting Data

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117965 Oct 27, 14:16 Awaiting Data

Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117964 Oct 27, 14:16 Awaiting Data

Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117963 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117962 Oct 27, 14:16 Awaiting Data

Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117961 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117960 Oct 27, 14:16 Awaiting Data

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117959 Oct 27, 14:16 Awaiting Data

Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117958 Oct 27, 14:16 Awaiting Data

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117957 Oct 27, 14:16 Awaiting Data

Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117956 Oct 27, 14:16 Awaiting Data

Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117955 Oct 27, 14:16 Awaiting Data

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117954 Oct 27, 14:16 Awaiting Data

Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117953 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117952 Oct 27, 14:16 Awaiting Data

Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117951 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117950 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117949 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117948 Oct 27, 14:16 Awaiting Data

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117947 Oct 27, 14:16 Awaiting Data

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117946 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117945 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117944 Oct 27, 14:16 Awaiting Data

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117943 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117942 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117941 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117940 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117939 Oct 27, 14:16 Awaiting Data

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117938 Oct 27, 14:16 Awaiting Data

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117937 Oct 27, 14:16 Awaiting Data

Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117936 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117935 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117934 Oct 27, 14:16 Awaiting Data

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117933 Oct 27, 14:16 Awaiting Data

Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117932 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117931 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117930 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117929 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117928 Oct 27, 14:16 Awaiting Data

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

CVE-2026-117927 Oct 27, 14:16 Awaiting Data

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117926 Oct 27, 14:16 Awaiting Data

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117925 Oct 27, 14:16 Awaiting Data

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117924 Oct 27, 14:16 Awaiting Data

Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117923 Oct 27, 14:16 Awaiting Data

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

CVE-2026-117922 Oct 27, 14:16 Awaiting Data

Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.