Where
-Infinity
0

Trending

Last week
Last month
Last year

Mozilla Firefox ESRRace condition in the IPC component

Risk 5
Severity
1
Race Condition

Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117999

Mozilla Firefox ESRInvalid pointer in the Graphics: WebRender component

Risk 33
Severity
7

Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

First published (updated )
CVE-2026-117917

Mozilla Firefox ESRIncorrect boundary conditions in the Layout: Scrolling and Overflow component

Risk 19
Severity
4

Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

First published (updated )
CVE-2026-117984

Mozilla Firefox ESRUse-after-free in the Layout component

Risk 33
Severity
7
Use After Free

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-117938

Mozilla Firefox ESRInvalid pointer in the Graphics component

Risk 33
Severity
7

Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

First published (updated )
CVE-2026-117871

Mozilla Firefox ESRPrivilege escalation due to use-after-free in the WebRTC: Networking component

Risk 33
Severity
7
Use After Free

Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117892

Mozilla Firefox ESRMitigation bypass in the DOM: Security component

Risk 19
Severity
4

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117967

Mozilla Firefox ESRSame-origin policy bypass in the CSS Parsing and Computation component

Risk 33
Severity
7

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117928

Mozilla Firefox ESRUse-after-free in the DOM: Core & HTML component

Risk 33
Severity
7
Use After Free

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

First published (updated )
CVE-2026-117929

Mozilla Firefox ESRUse-after-free in the DOM: Core & HTML component

Risk 33
Severity
7
Use After Free

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117949

Mozilla Firefox ESRIncorrect boundary conditions in the Graphics component

Risk 19
Severity
4

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

First published (updated )
CVE-2026-117978

Mozilla Firefox ESRUse-after-free in the Graphics: Canvas2D component

Risk 33
Severity
7
Use After Free

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117918

Mozilla Firefox ESRSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Risk 19
Severity
4

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

First published (updated )
CVE-2026-117988

Mozilla Firefox ESRInvalid pointer in the JavaScript Engine: JIT component

Risk 19
Severity
4

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117982

Mozilla Firefox ESRSame-origin policy bypass in the CSS Parsing and Computation component

Risk 33
Severity
7

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-117912

Mozilla Firefox ESRUse-after-free in the SVG component

Risk 33
Severity
7
Use After Free

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117913

Mozilla Firefox ESRFrame poisoning in the Layout component

Risk 5
Severity
1

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.

First published (updated )
CVE-2026-118027

Mozilla Firefox ESRSandbox escape due to invalid pointer in the Graphics: WebRender component

Risk 19
Severity
4

Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

First published (updated )
CVE-2026-117975

Mozilla Firefox ESRUse-after-free in the DOM: Events component

Risk 33
Severity
7
Use After Free

Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117931

Mozilla Firefox ESRRace condition in the Disability Access APIs component

Risk 19
Severity
4
Race Condition

Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117970

Mozilla Firefox ESRUse-after-free in the Audio/Video component

Risk 33
Severity
7
Use After Free

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

First published (updated )
CVE-2026-117923

Mozilla Firefox ESRUse-after-free in the Layout: Text and Fonts component

Risk 33
Severity
7
Use After Free

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117877

Mozilla Firefox ESRUse-after-free in the CSS Parsing and Computation component

Risk 33
Severity
7
Use After Free

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117921

Mozilla Firefox ESRInvalid pointer in the JavaScript Engine: JIT component

Risk 19
Severity
4

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-117969

Mozilla Firefox ESRUse-after-free in the Graphics component

Risk 19
Severity
4
Use After Free

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-117987

Mozilla Firefox ESRUse-after-free in the DOM: Core & HTML component

Risk 19
Severity
4
Use After Free

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117968

Mozilla Firefox ESRUse-after-free in the Networking: HTTP component

Risk 33
Severity
7
Use After Free

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

First published (updated )
CVE-2026-117899

Mozilla Firefox ESRSite isolation issue in the DOM: Service Workers component

Risk 19
Severity
4

Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117959

Mozilla Firefox ESRUse-after-free in the Layout: Text and Fonts component

Risk 33
Severity
7
Use After Free

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117902

Mozilla Firefox ESRUse-after-free in the SVG component

Risk 33
Severity
7
Use After Free

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117948

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203