Where
-Infinity
0

Trending

Last week
Last month
Last year

Mozilla ThunderbirdRace condition in the IPC component

Risk 19
Severity
4
Race Condition

Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117999

Mozilla Firefox ESRInvalid pointer in the Graphics: WebRender component

Risk 33
Severity
7

Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117917

ubuntu/mozjs52Spoofing issue in the Downloads component in Firefox for Android

Risk 19
Severity
4

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.

First published (updated )
CVE-2026-118018

Mozilla ThunderbirdIncorrect boundary conditions in the Layout: Scrolling and Overflow component

Risk 19
Severity
4

Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117984

Mozilla Firefox ESRUse-after-free in the Layout component

Risk 33
Severity
7
Use After Free

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117938

Mozilla ThunderbirdInvalid pointer in the Graphics component

Risk 33
Severity
7

Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

1 / 2
Source: Ubuntu
First published (updated )
CVE-2026-117871

Mozilla Firefox ESRPrivilege escalation due to use-after-free in the WebRTC: Networking component

Risk 33
Severity
7
Use After Free

Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117892

Mozilla ThunderbirdMitigation bypass in the DOM: Security component

Risk 19
Severity
4

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117967

Mozilla ThunderbirdSame-origin policy bypass in the CSS Parsing and Computation component

Risk 33
Severity
7

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117928

Mozilla Firefox ESRUse-after-free in the DOM: Core & HTML component

Risk 33
Severity
7
Use After Free

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117929

Mozilla ThunderbirdUse-after-free in the Graphics: Text component

Risk 19
Severity
4
Use After Free

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

First published (updated )
CVE-2026-118024

Mozilla Firefox ESRUse-after-free in the DOM: Core & HTML component

Risk 33
Severity
7
Use After Free

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117949

Mozilla Firefox ESRIncorrect boundary conditions in the Graphics component

Risk 19
Severity
4

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117978

Mozilla Firefox ESRUse-after-free in the Graphics: Canvas2D component

Risk 33
Severity
7
Use After Free

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117918

Mozilla ThunderbirdSandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Risk 19
Severity
4

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117988

Mozilla ThunderbirdInvalid pointer in the JavaScript Engine: JIT component

Risk 19
Severity
4

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117982

Mozilla ThunderbirdFrame poisoning in the CSS Parsing and Computation component

Risk 33
Severity
7

Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

First published (updated )
CVE-2026-118011

Mozilla Firefox ESRSame-origin policy bypass in the CSS Parsing and Computation component

Risk 33
Severity
7

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117912

Mozilla ThunderbirdUse-after-free in the SVG component

Risk 33
Severity
7
Use After Free

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117913

Mozilla ThunderbirdInvalid pointer in the JavaScript: GC component

Risk 19
Severity
4

Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

First published (updated )
CVE-2026-118026

Mozilla ThunderbirdSandbox escape due to invalid pointer in the Graphics: WebRender component

Risk 19
Severity
4

Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117975

Mozilla Firefox ESRUse-after-free in the DOM: Events component

Risk 33
Severity
7
Use After Free

Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117931

Mozilla ThunderbirdRace condition in the Disability Access APIs component

Risk 19
Severity
4
Race Condition

Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117970

Mozilla Firefox ESRUse-after-free in the Audio/Video component

Risk 33
Severity
7
Use After Free

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117923

Mozilla ThunderbirdSandbox escape due to use-after-free in the XPCOM component

Risk 19
Severity
4
Use After Free

Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

First published (updated )
CVE-2026-118021

Mozilla ThunderbirdUse-after-free in the Layout: Text and Fonts component

Risk 33
Severity
7
Use After Free

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

1 / 2
Source: Ubuntu
First published (updated )
CVE-2026-117877

Mozilla Firefox ESRUse-after-free in the CSS Parsing and Computation component

Risk 33
Severity
7
Use After Free

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117921

Mozilla ThunderbirdInvalid pointer in the JavaScript Engine: JIT component

Risk 19
Severity
4

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117969

Mozilla ThunderbirdUse-after-free in the Graphics component

Risk 19
Severity
4
Use After Free

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117987

Mozilla Firefox ESRUse-after-free in the DOM: Core & HTML component

Risk 19
Severity
4
Use After Free

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

First published (updated )
CVE-2026-117968

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203