⌘ + K

CVE Feed

—

Unknown

CVE-2026-117897

Last Modified: 27 Oct 2026

Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117898

Last Modified: 30 Oct 2026

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117895

Last Modified: 27 Oct 2026

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117896

Last Modified: 30 Oct 2026

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117894

Last Modified: 27 Oct 2026

Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117893

Last Modified: 27 Oct 2026

Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117890

Last Modified: 27 Oct 2026

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117889

Last Modified: 27 Oct 2026

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117891

Last Modified: 30 Oct 2026

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117888

Last Modified: 27 Oct 2026

Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117887

Last Modified: 27 Oct 2026

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117886

Last Modified: 27 Oct 2026

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117885

Last Modified: 28 Oct 2026

Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117884

Last Modified: 27 Oct 2026

Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117882

Last Modified: 28 Oct 2026

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117883

Last Modified: 30 Oct 2026

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117881

Last Modified: 30 Oct 2026

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117879

Last Modified: 28 Oct 2026

Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117878

Last Modified: 28 Oct 2026

Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117880

Last Modified: 30 Oct 2026

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117877

Last Modified: 30 Oct 2026

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117876

Last Modified: 30 Oct 2026

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117874

Last Modified: 28 Oct 2026

Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117875

Last Modified: 30 Oct 2026

Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117873

Last Modified: 28 Oct 2026

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117871

Last Modified: 27 Oct 2026

Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117872

Last Modified: 30 Oct 2026

Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117870

Last Modified: 28 Oct 2026

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117869

Last Modified: 28 Oct 2026

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117868

Last Modified: 27 Oct 2026

Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117867

Last Modified: 28 Oct 2026

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117866

Last Modified: 30 Oct 2026

Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117864

Last Modified: 27 Oct 2026

Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117863

Last Modified: 27 Oct 2026

Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117865

Last Modified: 30 Oct 2026

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117862

Last Modified: 28 Oct 2026

Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown

CVE-2026-117861

Last Modified: 27 Oct 2026

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

7.5

High

CVE-2026-117860

Last Modified: 27 Oct 2026

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026

—

Unknown