CVE Feed

    Dashboard / CVE

    —
    Unknown

    CVE-2026-117948

    Last Modified: 27 Oct 2026

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117947

    Last Modified: 27 Oct 2026

    Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117946

    Last Modified: 27 Oct 2026

    Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117945

    Last Modified: 27 Oct 2026

    Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117944

    Last Modified: 28 Oct 2026

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117943

    Last Modified: 28 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117942

    Last Modified: 28 Oct 2026

    Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117940

    Last Modified: 27 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117941

    Last Modified: 30 Oct 2026

    Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117939

    Last Modified: 27 Oct 2026

    Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117938

    Last Modified: 27 Oct 2026

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117937

    Last Modified: 27 Oct 2026

    Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117936

    Last Modified: 30 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117935

    Last Modified: 30 Oct 2026

    Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117934

    Last Modified: 27 Oct 2026

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117933

    Last Modified: 27 Oct 2026

    Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117932

    Last Modified: 27 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117929

    Last Modified: 27 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117931

    Last Modified: 30 Oct 2026

    Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117930

    Last Modified: 30 Oct 2026

    Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117928

    Last Modified: 27 Oct 2026

    Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117927

    Last Modified: 30 Oct 2026

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117926

    Last Modified: 27 Oct 2026

    Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117924

    Last Modified: 28 Oct 2026

    Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117925

    Last Modified: 30 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117923

    Last Modified: 28 Oct 2026

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117922

    Last Modified: 28 Oct 2026

    Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117921

    Last Modified: 27 Oct 2026

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117918

    Last Modified: 27 Oct 2026

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117920

    Last Modified: 30 Oct 2026

    Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117919

    Last Modified: 30 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117917

    Last Modified: 27 Oct 2026

    Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117916

    Last Modified: 28 Oct 2026

    Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117915

    Last Modified: 28 Oct 2026

    Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117914

    Last Modified: 27 Oct 2026

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117913

    Last Modified: 30 Oct 2026

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117912

    Last Modified: 28 Oct 2026

    Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117911

    Last Modified: 28 Oct 2026

    Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117910

    Last Modified: 28 Oct 2026

    Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117909

    Last Modified: 27 Oct 2026

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117908

    Last Modified: 28 Oct 2026

    Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117907

    Last Modified: 28 Oct 2026

    Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117905

    Last Modified: 27 Oct 2026

    Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    7.5
    High

    CVE-2026-117906

    Last Modified: 30 Oct 2026

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117904

    Last Modified: 28 Oct 2026

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117903

    Last Modified: 28 Oct 2026

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117902

    Last Modified: 28 Oct 2026

    Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117901

    Last Modified: 28 Oct 2026

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117900

    Last Modified: 28 Oct 2026

    Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    —
    Unknown

    CVE-2026-117899

    Last Modified: 27 Oct 2026

    Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Published: 27 Oct 2026
    Items Per Page