Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118005 | not reported | — | No | Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118004 | not reported | — | No | Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.... | 2026-10-27 |
| CVE-2026-118003 | not reported | — | No | Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, an... | 2026-10-27 |
| CVE-2026-118002 | not reported | — | No | Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Th... | 2026-10-27 |
| CVE-2026-118000 | not reported | — | No | Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, a... | 2026-10-27 |
| CVE-2026-117999 | not reported | — | No | Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | 2026-10-27 |
| CVE-2026-117998 | not reported | — | No | Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159,... | 2026-10-27 |
| CVE-2026-117997 | not reported | — | No | Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 15... | 2026-10-27 |
| CVE-2026-117996 | not reported | — | No | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and... | 2026-10-27 |
| CVE-2026-117995 | not reported | — | No | Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thund... | 2026-10-27 |
| CVE-2026-117994 | not reported | — | No | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunder... | 2026-10-27 |
| CVE-2026-117993 | not reported | — | No | Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thund... | 2026-10-27 |
| CVE-2026-117992 | not reported | — | No | Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefo... | 2026-10-27 |
| CVE-2026-117991 | not reported | — | No | Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thund... | 2026-10-27 |
| CVE-2026-117990 | not reported | — | No | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firef... | 2026-10-27 |
| CVE-2026-117989 | not reported | — | No | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 1... | 2026-10-27 |
| CVE-2026-117988 | not reported | — | No | Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Fir... | 2026-10-27 |
| CVE-2026-117987 | not reported | — | No | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 1... | 2026-10-27 |
| CVE-2026-117986 | not reported | — | No | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 1... | 2026-10-27 |
| CVE-2026-117985 | not reported | — | No | Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird... | 2026-10-27 |