Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-117967 | not reported | — | No | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thund... | 2026-10-27 |
| CVE-2026-117966 | not reported | — | No | Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,... | 2026-10-27 |
| CVE-2026-117965 | not reported | — | No | Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and... | 2026-10-27 |
| CVE-2026-117964 | not reported | — | No | Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Th... | 2026-10-27 |
| CVE-2026-117963 | not reported | — | No | Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunder... | 2026-10-27 |
| CVE-2026-117962 | not reported | — | No | Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Fi... | 2026-10-27 |
| CVE-2026-117961 | not reported | — | No | Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thund... | 2026-10-27 |
| CVE-2026-117960 | not reported | — | No | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thund... | 2026-10-27 |
| CVE-2026-117959 | not reported | — | No | Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159,... | 2026-10-27 |
| CVE-2026-117958 | not reported | — | No | Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and... | 2026-10-27 |
| CVE-2026-117957 | not reported | — | No | Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, an... | 2026-10-27 |
| CVE-2026-117956 | not reported | — | No | Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and... | 2026-10-27 |
| CVE-2026-117955 | not reported | — | No | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159... | 2026-10-27 |
| CVE-2026-117954 | not reported | — | No | Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thun... | 2026-10-27 |
| CVE-2026-117953 | not reported | — | No | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thund... | 2026-10-27 |
| CVE-2026-117952 | not reported | — | No | Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunde... | 2026-10-27 |
| CVE-2026-117951 | not reported | — | No | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunde... | 2026-10-27 |
| CVE-2026-117950 | not reported | — | No | Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ES... | 2026-10-27 |
| CVE-2026-117949 | not reported | — | No | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunde... | 2026-10-27 |
| CVE-2026-117948 | not reported | — | No | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an... | 2026-10-27 |