CVE Feed

    Dashboard / CVE

    —
    Unknown

    CVE-2026-117998

    Last Modified: 27 Oct 2026

    Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117996

    Last Modified: 27 Oct 2026

    Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117995

    Last Modified: 27 Oct 2026

    Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    8.8
    High

    CVE-2026-117997

    Last Modified: 29 Oct 2026

    Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117994

    Last Modified: 27 Oct 2026

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117993

    Last Modified: 27 Oct 2026

    Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117992

    Last Modified: 27 Oct 2026

    Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117991

    Last Modified: 27 Oct 2026

    Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117990

    Last Modified: 27 Oct 2026

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117989

    Last Modified: 27 Oct 2026

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    6.1
    Medium

    CVE-2026-117987

    Last Modified: 30 Oct 2026

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    6.1
    Medium

    CVE-2026-117988

    Last Modified: 27 Oct 2026

    Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117984

    Last Modified: 27 Oct 2026

    Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    6.1
    Medium

    CVE-2026-117985

    Last Modified: 30 Oct 2026

    Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    6.1
    Medium

    CVE-2026-117986

    Last Modified: 30 Oct 2026

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117983

    Last Modified: 27 Oct 2026

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117982

    Last Modified: 28 Oct 2026

    Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117981

    Last Modified: 27 Oct 2026

    Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117979

    Last Modified: 27 Oct 2026

    Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    6.1
    Medium

    CVE-2026-117980

    Last Modified: 30 Oct 2026

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117978

    Last Modified: 27 Oct 2026

    Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117977

    Last Modified: 28 Oct 2026

    Other issue in the Console component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117976

    Last Modified: 27 Oct 2026

    Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117975

    Last Modified: 28 Oct 2026

    Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    6.1
    Medium

    CVE-2026-117973

    Last Modified: 30 Oct 2026

    Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    6.1
    Medium

    CVE-2026-117974

    Last Modified: 27 Oct 2026

    Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117972

    Last Modified: 27 Oct 2026

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    6.1
    Medium

    CVE-2026-117971

    Last Modified: 27 Oct 2026

    Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117970

    Last Modified: 28 Oct 2026

    Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117969

    Last Modified: 27 Oct 2026

    Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117968

    Last Modified: 27 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117967

    Last Modified: 27 Oct 2026

    Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117966

    Last Modified: 27 Oct 2026

    Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    6.1
    Medium

    CVE-2026-117965

    Last Modified: 30 Oct 2026

    Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117963

    Last Modified: 28 Oct 2026

    Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117962

    Last Modified: 27 Oct 2026

    Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    6.1
    Medium

    CVE-2026-117964

    Last Modified: 30 Oct 2026

    Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117961

    Last Modified: 28 Oct 2026

    Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117960

    Last Modified: 27 Oct 2026

    Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117959

    Last Modified: 27 Oct 2026

    Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117958

    Last Modified: 27 Oct 2026

    Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117957

    Last Modified: 28 Oct 2026

    Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117956

    Last Modified: 27 Oct 2026

    Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117955

    Last Modified: 27 Oct 2026

    JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117954

    Last Modified: 27 Oct 2026

    Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117953

    Last Modified: 28 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117952

    Last Modified: 27 Oct 2026

    Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117951

    Last Modified: 28 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117950

    Last Modified: 27 Oct 2026

    Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117949

    Last Modified: 27 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    Items Per Page