Live · 98 sources · updated 4m ago

· 12:35 UTC

The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

Clear

254 matching records.

  1. 26
    CVE NVD

    When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64.

    When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap…

    CVSS 5.3 Fix available CVE-2026-113868 Microsoft Mozilla Identity
  2. 25
    CVE NVD

    When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response without validating it.

    When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response without validating it. A malicious or compromised homeserver could provide a file: URL, causing Thunderbird to…

    Fix available CVE-2026-118180 Mozilla Identity
  3. 25
    CVE NVD

    When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird accepted calendar…

    When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird accepted calendar locations pointing to other servers, local files or network shares. A malicious…

    Fix available CVE-2026-118177 Mozilla Identity
  4. 25
    CVE NVD

    Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC…

    Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to…

    Fix available CVE-2026-118176 Mozilla Identity
  5. 21
    CVE NVD

    A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message…

    A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1.

    CVSS 5.4 Fix available CVE-2026-116632 Mozilla Mobile OS
  6. 21
    CVE NVD

    A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site…

    A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.

    CVSS 5.4 Fix available CVE-2026-116631 Mozilla Mobile OS
  7. 20
    CVE NVD

    When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the…

    When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed…

    CVSS 5.4 Fix available CVE-2026-113869 Mozilla Email
  8. 19
    CVE NVD

    Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and port given in the link, even…

    Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and port given in the link, even if it was not a configured news server. Line breaks in the message-ID were sent…

    Fix available CVE-2026-118179 Mozilla Email
  9. 19
    CVE NVD

    A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL.

    A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL. Thunderbird then read that location on every feed update. This allowed a malicious feed…

    Fix available CVE-2026-118178 Mozilla Email
  10. 19
    CVE NVD

    When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same…

    When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the message being composed, without showing a blocked content warning.…

    Fix available CVE-2026-118175 Mozilla Email
  11. 19
    CVE NVD

    When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's content to offer importing the…

    When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's content to offer importing the key. A sender could mark the attachment as an external attachment pointing to an…

    Fix available CVE-2026-118174 Mozilla Email
  12. 18
    CVE NVD

    Spoofing issue in the Downloads component in Firefox for Android.

    Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118018 Mozilla Mobile OS
  13. 17
    CVE NVD

    Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas.

    Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies, a remote XMPP user could send a crafted request that caused…

    Fix available CVE-2026-113867 Mozilla Email
  14. 17
    CVE NVD

    Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings…

    Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring…

    Fix available CVE-2026-113470 Mozilla Identity
  15. 16
    CVE NVD

    Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component.

    Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.

    Fix available CVE-2026-109705 Mozilla Browser
  16. 12
    CVE NVD

    Frame poisoning in the Layout component.

    Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.

    Fix available CVE-2026-118027 Mozilla Browser
  17. 12
    CVE NVD

    Invalid pointer in the JavaScript: GC component.

    Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118026 Mozilla Browser
  18. 12
    CVE NVD

    Other issue in the SVG component.

    Other issue in the SVG component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118025 Mozilla Browser
  19. 12
    CVE NVD

    Use-after-free in the Graphics: Text component.

    Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118024 Mozilla Browser
  20. 12
    CVE NVD

    Sandbox escape due to use-after-free in the Graphics: WebRender component.

    Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118023 Mozilla Browser
  21. 12
    CVE NVD

    Sandbox escape due to use-after-free in the Disability Access APIs component.

    Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118022 Mozilla Browser
  22. 12
    CVE NVD

    Sandbox escape due to use-after-free in the XPCOM component.

    Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118021 Mozilla Browser
  23. 12
    CVE NVD

    Use-after-free in the Layout component.

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118020 Mozilla Browser
  24. 12
    CVE NVD

    Race condition, use-after-free in the DOM: File component.

    Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118019 Mozilla Browser
  25. 12
    CVE NVD

    Use-after-free in the SVG component.

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118017 Mozilla Browser
  26. 12
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118016 Mozilla Browser
  27. 12
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118015 Mozilla Browser
  28. 12
    CVE NVD

    Use-after-free in the JavaScript Engine: JIT component.

    Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118014 Mozilla Browser
  29. 12
    CVE NVD

    Use-after-free in the Layout: Images, Video, and HTML Frames component.

    Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118013 Mozilla Browser
  30. 12
    CVE NVD

    Use-after-free in the DOM: Animation component.

    Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118012 Mozilla Browser
  31. 12
    CVE NVD

    Frame poisoning in the CSS Parsing and Computation component.

    Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118011 Mozilla Browser
  32. 12
    CVE NVD

    Use-after-free in the Disability Access APIs component.

    Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118010 Mozilla Browser
  33. 12
    CVE NVD

    Integer overflow, use-after-free in the Graphics: Text component.

    Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118009 Mozilla Browser
  34. 12
    CVE NVD

    Privilege escalation in the DOM: Navigation component.

    Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118008 Mozilla Browser
  35. 12
    CVE NVD

    Use-after-free in the JavaScript: GC component.

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118007 Mozilla Browser
  36. 12
    CVE NVD

    Privilege escalation due to use-after-free in the WebRTC: Signaling component.

    Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118006 Mozilla Browser
  37. 12
    CVE NVD

    Use-after-free in the WebRTC: Signaling component.

    Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159.

    Fix available CVE-2026-118005 Mozilla Browser
  38. 12
    CVE NVD

    Incorrect boundary conditions in the CSS Transitions and Animations component.

    Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-118004 Mozilla Browser
  39. 12
    CVE NVD

    Information disclosure in the Networking: DNS component.

    Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-118003 Mozilla Browser
  40. 12
    CVE NVD

    Information disclosure due to race condition in the Networking component.

    Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-118002 Mozilla Browser
  41. 12
    CVE NVD

    Information disclosure in the Networking: HTTP component.

    Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-118000 Mozilla Browser
  42. 12
    CVE NVD

    Race condition in the IPC component.

    Race condition in the IPC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117999 Mozilla Browser
  43. 12
    CVE NVD

    Mitigation bypass in the DOM: Push Subscriptions component.

    Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117998 Mozilla Browser
  44. 12
    CVE NVD

    Sandbox escape due to use-after-free in the Widget component.

    Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117997 Mozilla Browser
  45. 12
    CVE NVD

    Incorrect boundary conditions in the WebRTC component.

    Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117996 Mozilla Browser
  46. 12
    CVE NVD

    Privilege escalation in the DOM: UI Events & Focus Handling component.

    Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117995 Mozilla Browser
  47. 12
    CVE NVD

    Use-after-free in the JavaScript: GC component.

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117994 Mozilla Browser
  48. 12
    CVE NVD

    Integer overflow in the Graphics: Text component.

    Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117993 Mozilla Browser
  49. 12
    CVE NVD

    Information disclosure in the CSS Parsing and Computation component.

    Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117992 Mozilla Browser
  50. 12
    CVE NVD

    Incorrect boundary conditions in the Layout: Text and Fonts component.

    Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117991 Mozilla Browser
  51. 12
    CVE NVD

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117990 Mozilla Browser
  52. 12
    CVE NVD

    Use-after-free in the Graphics component.

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117989 Mozilla Browser
  53. 12
    CVE NVD

    Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component.

    Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117988 Mozilla Browser
  54. 12
    CVE NVD

    Use-after-free in the Graphics component.

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117987 Mozilla Browser
  55. 12
    CVE NVD

    Use-after-free in the Graphics component.

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117986 Mozilla Browser
  56. 12
    CVE NVD

    Sandbox escape due to use-after-free in the Graphics component.

    Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117985 Mozilla Browser
  57. 12
    CVE NVD

    Incorrect boundary conditions in the Layout: Scrolling and Overflow component.

    Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117984 Mozilla Browser
  58. 12
    CVE NVD

    Use-after-free in the Graphics component.

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117983 Mozilla Browser
  59. 12
    CVE NVD

    Invalid pointer in the JavaScript Engine: JIT component.

    Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117982 Mozilla Browser
  60. 12
    CVE NVD

    Privilege escalation in the Toolkit component.

    Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117981 Mozilla Browser
  61. 12
    CVE NVD

    Use-after-free in the Graphics component.

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117980 Mozilla Browser
  62. 12
    CVE NVD

    Incorrect boundary conditions in the Graphics: WebRender component.

    Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117979 Mozilla Browser
  63. 12
    CVE NVD

    Incorrect boundary conditions in the Graphics component.

    Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117978 Mozilla Browser
  64. 12
    CVE NVD

    Other issue in the Console component.

    Other issue in the Console component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117977 Mozilla Browser
  65. 12
    CVE NVD

    Site isolation issue in the DOM: Navigation component.

    Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117976 Mozilla Browser
  66. 12
    CVE NVD

    Sandbox escape due to invalid pointer in the Graphics: WebRender component.

    Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117975 Mozilla Browser
  67. 12
    CVE NVD

    Use-after-free in the XML component.

    Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117974 Mozilla Browser
  68. 12
    CVE NVD

    Use-after-free in the Networking: DNS component.

    Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117973 Mozilla Browser
  69. 12
    CVE NVD

    Use-after-free in the Graphics component.

    Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117972 Mozilla Browser
  70. 12
    CVE NVD

    Sandbox escape due to use-after-free in the Print Preview component.

    Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117971 Mozilla Browser
  71. 12
    CVE NVD

    Race condition in the Disability Access APIs component.

    Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117970 Mozilla Browser
  72. 12
    CVE NVD

    Invalid pointer in the JavaScript Engine: JIT component.

    Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117969 Mozilla Browser
  73. 12
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117968 Mozilla Browser
  74. 12
    CVE NVD

    Mitigation bypass in the DOM: Security component.

    Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117967 Mozilla Browser
  75. 12
    CVE NVD

    Site isolation issue in the Networking: HTTP component.

    Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117966 Mozilla Browser
  76. 12
    CVE NVD

    Same-origin policy bypass in the Address Bar component.

    Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117965 Mozilla Browser
  77. 12
    CVE NVD

    Use-after-free in the Panning and Zooming component.

    Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117964 Mozilla Browser
  78. 12
    CVE NVD

    Incorrect boundary conditions in the DOM: Service Workers component.

    Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117963 Mozilla Browser
  79. 12
    CVE NVD

    Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component.

    Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117962 Mozilla Browser
  80. 12
    CVE NVD

    Incorrect boundary conditions in the Layout: Text and Fonts component.

    Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117961 Mozilla Browser
  81. 12
    CVE NVD

    Spoofing issue in the DOM: Core & HTML component.

    Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117960 Mozilla Browser
  82. 12
    CVE NVD

    Site isolation issue in the DOM: Service Workers component.

    Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117959 Mozilla Browser
  83. 12
    CVE NVD

    Site isolation issue in the Networking: HTTP component.

    Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117958 Mozilla Browser
  84. 12
    CVE NVD

    Cryptographic issue in the WebRTC: Networking component.

    Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117957 Mozilla Browser
  85. 12
    CVE NVD

    Invalid pointer in the Nimbus Desktop Client component.

    Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117956 Mozilla Browser
  86. 12
    CVE NVD

    JIT miscompilation in the JavaScript: WebAssembly component.

    JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117955 Mozilla Browser
  87. 12
    CVE NVD

    Use-after-free in the Layout: Positioned component.

    Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117954 Mozilla Browser
  88. 12
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117953 Mozilla Browser
  89. 12
    CVE NVD

    Uninitialized memory in the Networking component.

    Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117952 Mozilla Browser
  90. 12
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117951 Mozilla Browser
  91. 12
    CVE NVD

    Incorrect boundary conditions in the DOM: Core & HTML component.

    Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117950 Mozilla Browser
  92. 12
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117949 Mozilla Browser
  93. 12
    CVE NVD

    Use-after-free in the SVG component.

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117948 Mozilla Browser
  94. 12
    CVE NVD

    Use-after-free in the XML component.

    Use-after-free in the XML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117947 Mozilla Browser
  95. 12
    CVE NVD

    Incorrect boundary conditions in the JavaScript Engine component.

    Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117946 Mozilla Browser
  96. 12
    CVE NVD

    Incorrect boundary conditions in the XML component.

    Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.

    Fix available CVE-2026-117945 Mozilla Browser
  97. 12
    CVE NVD

    Use-after-free in the Layout component.

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117944 Mozilla Browser
  98. 12
    CVE NVD

    Use-after-free in the DOM: Core & HTML component.

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117943 Mozilla Browser
  99. 12
    CVE NVD

    Incorrect boundary conditions in the JavaScript Engine: JIT component.

    Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117942 Mozilla Browser
  100. 12
    CVE NVD

    Use-after-free in the DOM: CSS Object Model component.

    Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

    Fix available CVE-2026-117941 Mozilla Browser

Reuse this view

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Mozilla&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help