Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118025 | not reported | — | No | Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118024 | not reported | — | No | Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118023 | not reported | — | No | Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118022 | not reported | — | No | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 15... | 2026-10-27 |
| CVE-2026-118021 | not reported | — | No | Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118020 | not reported | — | No | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118019 | not reported | — | No | Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118017 | not reported | — | No | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118016 | not reported | — | No | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118015 | not reported | — | No | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118014 | not reported | — | No | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118013 | not reported | — | No | Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118012 | not reported | — | No | Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118011 | not reported | — | No | Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118010 | not reported | — | No | Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118009 | not reported | — | No | Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118007 | not reported | — | No | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118006 | not reported | — | No | Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 1... | 2026-10-27 |
| CVE-2026-118005 | not reported | — | No | Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | 2026-10-27 |
| CVE-2026-118004 | not reported | — | No | Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.... | 2026-10-27 |