Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-117984 | not reported | — | No | Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.... | 2026-10-27 |
| CVE-2026-117983 | not reported | — | No | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 1... | 2026-10-27 |
| CVE-2026-117982 | not reported | — | No | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, an... | 2026-10-27 |
| CVE-2026-117981 | not reported | — | No | Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderb... | 2026-10-27 |
| CVE-2026-117980 | not reported | — | No | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 1... | 2026-10-27 |
| CVE-2026-117979 | not reported | — | No | Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox... | 2026-10-27 |
| CVE-2026-117978 | not reported | — | No | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,... | 2026-10-27 |
| CVE-2026-117977 | not reported | — | No | Other issue in the Console component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6... | 2026-10-27 |
| CVE-2026-117976 | not reported | — | No | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and... | 2026-10-27 |
| CVE-2026-117975 | not reported | — | No | Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6,... | 2026-10-27 |
| CVE-2026-117974 | not reported | — | No | Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an... | 2026-10-27 |
| CVE-2026-117973 | not reported | — | No | Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunde... | 2026-10-27 |
| CVE-2026-117972 | not reported | — | No | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 1... | 2026-10-27 |
| CVE-2026-117971 | not reported | — | No | Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefo... | 2026-10-27 |
| CVE-2026-117970 | not reported | — | No | Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and... | 2026-10-27 |
| CVE-2026-117969 | not reported | — | No | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, an... | 2026-10-27 |
| CVE-2026-117968 | not reported | — | No | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunde... | 2026-10-27 |
| CVE-2026-117967 | not reported | — | No | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thund... | 2026-10-27 |
| CVE-2026-117966 | not reported | — | No | Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,... | 2026-10-27 |
| CVE-2026-117965 | not reported | — | No | Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and... | 2026-10-27 |