Every CVESearch/Get API key

CVE-2026-118024

Use-after-free in the Graphics: Text component

8.8 HighFix available

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.25%Up 0.1 points since Oct 28, 2026
90%50%10%1%

What each source reports

CVE List Score used8.8

Use-after-free in the Graphics: Text component

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7.

Record
CVE-2026-118024
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-10
EUVDEUVD-2026-1109228.8

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7.

Record
EUVD-2026-110922
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-10
GitHub AdvisoriesGHSA-935v-p3rc-7qm78.8

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159.

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159.

Record
GHSA-935v-p3rc-7qm7
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-10
NVD8.8

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7.

Record
CVE-2026-118024
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-11
OSVDEBIAN-CVE-2026-1180248.8

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7.

Record
DEBIAN-CVE-2026-118024
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-12
OSVRLSA-2026:991127.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-118007)

  • firefox: thunderbird: Sandbox escape due to use-after-free in the XPCOM component (CVE-2026-118021)

  • firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-118024)

  • firefox: thunderbird: Race condition, use-after-free in the DOM: File component (CVE-2026-118019)

  • firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-124860)

  • firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-124914)

  • firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124869)

  • firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-124854)

  • firefox: thunderbird: Use-after-free in the Layout: Positioned component (CVE-2026-124877)

  • firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-124917)

  • firefox: thunderbird: Incorrect boundary conditions in the DOM: Selection component (CVE-2026-124891)

  • firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-124857)

  • firefox: thunderbird: Information disclosure in the Security: RLBox component (CVE-2026-124941)

  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-124855)

  • firefox: thunderbird: Spoofing issue in the Security component (CVE-2026-124934)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component (CVE-2026-124853)

  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-124905)

  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component (CVE-2026-124859)

  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124881)

  • firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124862)

  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124882)

  • firefox: thunderbird: Information disclosure in the Private Browsing component (CVE-2026-124909)

  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124876)

  • firefox: thunderbird: Use-after-free in the DOM: Workers component (CVE-2026-124893)

  • firefox: thunderbird: Use-after-free in the Graphics: WebRender component (CVE-2026-124906)

  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-124887)

  • firefox: thunderbird: Mitigation bypass in the WebExtensions component (CVE-2026-124910)

  • firefox: thunderbird: Privilege escalation in the Nimbus Desktop Client component (CVE-2026-124951)

  • firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-124865)

  • firefox: thunderbird: Incorrect boundary conditions, use-after-free in the Graphics component (CVE-2026-124948)

  • firefox: thunderbird: Undefined behavior in the WebRTC: Networking component (CVE-2026-124935)

  • firefox: thunderbird: Incorrect boundary conditions in the DOM: CSS Object Model component (CVE-2026-124875)

  • firefox: thunderbird: Sandbox escape due to use-after-free in the IPC component (CVE-2026-124903)

  • firefox: thunderbird: Incorrect boundary conditions in the Networking: HTTP component (CVE-2026-124856)

  • firefox: thunderbird: Use-after-free in the Networking: Cookies component (CVE-2026-124894)

  • firefox: thunderbird: Use-after-free in the Storage: localStorage & sessionStorage component (CVE-2026-124895)

  • firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-124885)

  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-124899)

  • firefox: thunderbird: Sandbox escape in the Console component…

Record
RLSA-2026:99112
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-13
OSVUBUNTU-CVE-2026-1180248.8

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Record
UBUNTU-CVE-2026-118024
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-07
OSVopenSUSE-SU-2026:12527-1No score

firefox-esr-153.7.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-153.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12527-1
Updated
2026-11-12
OSVSUSE-SU-2026:5174-1No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 153.7.0 ESR (MFSA 2026-127, bsc#1289275):

  • CVE-2026-118007: Use-after-free in the JavaScript: GC component.
  • CVE-2026-118019: Race condition, use-after-free in the DOM: File component.
  • CVE-2026-118021: Sandbox escape due to use-after-free in the XPCOM component.
  • CVE-2026-118024: Use-after-free in the Graphics: Text component.
  • CVE-2026-124853: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component.
  • CVE-2026-124854: Privilege escalation in the DOM: Navigation component.
  • CVE-2026-124855: Sandbox escape in the DOM: Navigation component.
  • CVE-2026-124856: Incorrect boundary conditions in the Networking: HTTP component.
  • CVE-2026-124857: Use-after-free in the Graphics: Canvas2D component.
  • CVE-2026-124858: Use-after-free in the DOM: HTML Parser component.
  • CVE-2026-124859: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component.
  • CVE-2026-124860: Use-after-free in the Audio/Video component.
  • CVE-2026-124861: Sandbox escape due to use-after-free in the Audio/Video: cubeb component.
  • CVE-2026-124862: Use-after-free in the DOM: Core & HTML component.
  • CVE-2026-124863: Use-after-free in the DOM: HTML Parser component.
  • CVE-2026-124864: Sandbox escape due to use-after-free in the DOM: Service Workers component.
  • CVE-2026-124865: Use-after-free in the Audio/Video component.
  • CVE-2026-124866: Use-after-free in the Layout component.
  • CVE-2026-124868: Incorrect boundary conditions in the DOM: Core & HTML component.
  • CVE-2026-124869: Use-after-free in the DOM: Core & HTML component.
  • CVE-2026-124870: Incorrect boundary conditions in the JavaScript: GC component.
  • CVE-2026-124872: Use-after-free in the Cycle Collector component.
  • CVE-2026-124873: Invalid pointer in the DOM: Editor component.
  • CVE-2026-124874: Same-origin policy bypass in the Networking: HTTP component.
  • CVE-2026-124875: Incorrect boundary conditions in the DOM: CSS Object Model component.
  • CVE-2026-124876: Use-after-free in the CSS Parsing and Computation component.
  • CVE-2026-124877: Use-after-free in the Layout: Positioned component.
  • CVE-2026-124879: Invalid pointer in the Networking: Cache component.
  • CVE-2026-124880: Use-after-free in the DOM: Core & HTML component.
  • CVE-2026-124881: Use-after-free in the CSS Parsing and Computation component.
  • CVE-2026-124882: Use-after-free in the CSS Parsing and Computation component.
  • CVE-2026-124883: Use-after-free in the DOM: Core & HTML component.
  • CVE-2026-124884: Use-after-free in the JavaScript: GC component.
  • CVE-2026-124885: Use-after-free in the Graphics: Text component.
  • CVE-2026-124886: Invalid pointer in the Layout: Text and Fonts component.
  • CVE-2026-124887: Incorrect boundary conditions in the Layout: Text and Fonts component.
  • CVE-2026-124888: Incorrect boundary conditions in the Layout: Text and Fonts component.
  • CVE-2026-124889: Use-after-free in the CSS Parsing and Computation component.
  • CVE-2026-124890: Use-after-free in the DOM: Core & HTML component.
  • CVE-2026-124891: Incorrect boundary conditions in the DOM: Selection component.
  • CVE-2026-124892: Use-after-free in the JavaScript: GC component.
  • CVE-2026-124893: Use-after-free in the DOM: Workers component.
  • CVE-2026-124894: Use-after-free in the Networking: Cookies component.
  • CVE-2026-124895: Use-after-free in the Storage: localStorage & sessionStorage component.
  • CVE-2026-124896: Invalid pointer in the Layout: Text and Fonts component.
  • CVE-2026-124897: Use-after-free in the JavaScript: GC component.
  • CVE-2026-124898: Use-after-free in the DOM: Editor component.
  • CVE-2026-124899: Use-after-free in the Layout: Text and Fonts component.
  • CVE-2026-124901: Other issue in the Networking: JAR component.
  • CVE-2026-124902: Same-origin policy bypass due to race condition in the Audio/Video component.
  • CVE-2026-124903: Sandbox escape due to…
Record
SUSE-SU-2026:5174-1
Updated
2026-11-11

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox-esr
Debian:12
before 153.7.0esr-1~deb12u1, plus listed versions
102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1
Show 45 moreShow less
102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1102.15.1esr-1~deb12u1115.0.2esr-1115.1.0esr-1115.10.0esr-1115.10.0esr-1~deb10u1115.10.0esr-1~deb11u1115.10.0esr-1~deb12u1115.11.0esr-1115.11.0esr-1~deb10u1115.11.0esr-1~deb11u1115.11.0esr-1~deb12u1115.12.0esr-1115.12.0esr-1~deb10u1115.12.0esr-1~deb11u1115.12.0esr-1~deb12u1115.13.0esr-1115.13.0esr-1~deb11u1115.13.0esr-1~deb12u1115.13.0esr-2115.14.0esr-1115.14.0esr-1~deb11u1115.14.0esr-1~deb12u1115.15.0esr-1115.15.0esr-1~deb11u1115.15.0esr-1~deb12u1115.2.0esr-1115.2.1esr-1115.3.0esr-1115.3.0esr-1~deb10u1115.3.0esr-1~deb11u1115.3.0esr-1~deb12u1115.3.1esr-1~deb10u1115.3.1esr-1~deb11u1
153.7.0esr-1~deb12u1
firefox-esr
Debian:13
before 153.7.0esr-1~deb13u1, plus listed versions
128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1
Show 45 moreShow less
140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.12.0esr-1~deb13u1140.13.0esr-1140.13.0esr-1~deb11u1140.13.0esr-1~deb12u1140.13.0esr-1~deb13u1140.13.0esr-2140.14.0esr-1~deb11u1140.14.0esr-1~deb12u1140.14.0esr-1~deb13u1140.14.0esr-2140.15.0esr-1140.15.0esr-1~deb12u1140.15.0esr-1~deb13u1140.16.0esr-1140.16.0esr-1~deb12u1140.16.0esr-1~deb13u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1
153.7.0esr-1~deb13u1
firefox-esr
Debian:14
All versions, plus listed versions
128.13.0esr-1128.14.0esr-1128.14.0esr-1~deb11u1128.14.0esr-1~deb12u1128.14.0esr-1~deb13u1
Show 45 moreShow less
140.10.0esr-1140.10.0esr-1~deb11u1140.10.0esr-1~deb12u1140.10.0esr-1~deb13u1140.10.1esr-1140.10.1esr-1~deb11u1140.10.1esr-1~deb12u1140.10.1esr-1~deb13u1140.10.2esr-1140.10.2esr-1~deb11u1140.10.2esr-1~deb12u1140.10.2esr-1~deb13u1140.11.0esr-1140.11.0esr-1~deb11u1140.11.0esr-1~deb12u1140.11.0esr-1~deb13u1140.12.0esr-1140.12.0esr-1~deb11u1140.12.0esr-1~deb12u1140.12.0esr-1~deb13u1140.13.0esr-1140.13.0esr-1~deb11u1140.13.0esr-1~deb12u1140.13.0esr-1~deb13u1140.13.0esr-2140.14.0esr-1~deb11u1140.14.0esr-1~deb12u1140.14.0esr-1~deb13u1140.14.0esr-2140.15.0esr-1140.15.0esr-1~deb12u1140.15.0esr-1~deb13u1140.16.0esr-1140.16.0esr-1~deb12u1140.16.0esr-1~deb13u1140.3.0esr-1140.3.0esr-1~deb11u1140.3.0esr-1~deb11u2140.3.0esr-1~deb12u1140.3.0esr-1~deb13u1140.3.0esr-2140.3.1esr-1140.3.1esr-1~deb11u1140.3.1esr-1~deb12u1140.3.1esr-1~deb13u1
None known
thunderbird
Debian:12
before 1:153.7.0esr-1~deb12u1, plus listed versions
1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1
Show 45 moreShow less
1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u11:102.15.1-1~deb12u11:103.0~b5-11:104.0~b2-11:110.0~b4-11:112.0~b1-11:113.0~b3-11:114.0~b2-11:115.0-11:115.0.1-11:115.0.1-21:115.0~b4-11:115.0~b6-11:115.1.0-11:115.1.1-11:115.10.1-11:115.10.1-1~deb10u11:115.10.1-1~deb11u11:115.10.1-1~deb12u11:115.11.0-11:115.11.0-1~deb10u11:115.11.0-1~deb11u11:115.11.0-1~deb12u11:115.12.0-11:115.12.0-1~deb10u11:115.12.0-1~deb11u11:115.12.0-1~deb12u11:115.13.0-11:115.13.0-1~deb11u11:115.13.0-1~deb12u1
1:153.7.0esr-1~deb12u1
thunderbird
Debian:13
before 1:153.7.0esr-1~deb13u1, plus listed versions
1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1
Show 45 moreShow less
1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.10.0esr-11:140.10.0esr-1~deb11u11:140.10.0esr-1~deb12u11:140.10.0esr-1~deb13u11:140.10.1esr-11:140.10.1esr-1~deb11u11:140.10.1esr-1~deb12u11:140.10.1esr-1~deb13u11:140.10.2esr-11:140.10.2esr-1~deb11u11:140.10.2esr-1~deb12u11:140.10.2esr-1~deb13u11:140.11.0esr-11:140.11.0esr-1~deb11u11:140.11.0esr-1~deb12u11:140.11.0esr-1~deb13u11:140.12.0esr-11:140.12.0esr-1~deb11u11:140.12.0esr-1~deb12u11:140.12.0esr-1~deb13u11:140.13.0esr-11:140.13.0esr-21:140.13.0esr-2~deb11u11:140.13.0esr-2~deb12u11:140.13.0esr-2~deb13u11:140.14.0esr-11:140.14.0esr-1~deb11u11:140.14.0esr-1~deb12u11:140.14.0esr-1~deb13u11:140.15.0esr-1~deb12u11:140.15.0esr-1~deb13u11:140.16.0esr-1~deb12u11:140.16.0esr-1~deb13u11:140.17.0esr-1~deb12u11:140.17.0esr-1~deb13u1
1:153.7.0esr-1~deb13u1
thunderbird
Debian:14
All versions, plus listed versions
1:128.13.0esr-11:128.14.0esr-11:128.14.0esr-1~deb11u11:128.14.0esr-1~deb12u11:128.14.0esr-1~deb13u1
Show 45 moreShow less
1:129.0~b6-11:130.0~b3-11:132.0~b6-11:135.0-11:136.0-11:137.0-11:138.0-11:140.0.1esr-11:140.1.0esr-11:140.1.1esr-11:140.10.0esr-11:140.10.0esr-1~deb11u11:140.10.0esr-1~deb12u11:140.10.0esr-1~deb13u11:140.10.1esr-11:140.10.1esr-1~deb11u11:140.10.1esr-1~deb12u11:140.10.1esr-1~deb13u11:140.10.2esr-11:140.10.2esr-1~deb11u11:140.10.2esr-1~deb12u11:140.10.2esr-1~deb13u11:140.11.0esr-11:140.11.0esr-1~deb11u11:140.11.0esr-1~deb12u11:140.11.0esr-1~deb13u11:140.12.0esr-11:140.12.0esr-1~deb11u11:140.12.0esr-1~deb12u11:140.12.0esr-1~deb13u11:140.13.0esr-11:140.13.0esr-21:140.13.0esr-2~deb11u11:140.13.0esr-2~deb12u11:140.13.0esr-2~deb13u11:140.14.0esr-11:140.14.0esr-1~deb11u11:140.14.0esr-1~deb12u11:140.14.0esr-1~deb13u11:140.15.0esr-1~deb12u11:140.15.0esr-1~deb13u11:140.16.0esr-1~deb12u11:140.16.0esr-1~deb13u11:140.17.0esr-1~deb12u11:140.17.0esr-1~deb13u1
None known
firefox
Rocky Linux:8
From an advisory covering 81 CVEs
before 0:153.7.0-1.el8_10
0:153.7.0-1.el8_10
firefox-debuginfo
Rocky Linux:8
From an advisory covering 81 CVEs
before 0:153.7.0-1.el8_10
0:153.7.0-1.el8_10
firefox-debugsource
Rocky Linux:8
From an advisory covering 81 CVEs
before 0:153.7.0-1.el8_10
0:153.7.0-1.el8_10
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 81 CVEs
before 153.7.0-118.22.1
153.7.0-118.22.1
Show 12 moreShow less
Affected packages
PackageAffectedFixed
MozillaFirefox
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 81 CVEs
before 153.7.0-118.22.1
153.7.0-118.22.1
mozjs52
Ubuntu:18.04:LTS
All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
None known
mozjs38
Ubuntu:18.04:LTS
All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
None known
mozjs68
Ubuntu:20.04:LTS
All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
None known
mozjs52
Ubuntu:20.04:LTS
All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
None known
mozjs102
Ubuntu:22.04:LTS
All versions, plus listed versions
102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1
None known
mozjs78
Ubuntu:22.04:LTS
All versions, plus listed versions
78.13.0-178.15.0-278.15.0-4ubuntu1
None known
mozjs91
Ubuntu:22.04:LTS
All versions, plus listed versions
91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1
None known
thunderbird
Ubuntu:22.04:LTS
All versions, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 34 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.11:115.3.1+build1-0ubuntu0.22.04.21:115.4.1+build1-0ubuntu0.22.04.11:115.5.0+build1-0ubuntu0.22.04.11:115.6.0+build2-0ubuntu0.22.04.11:115.8.1+build1-0ubuntu0.22.04.11:115.9.0+build1-0ubuntu0.22.04.11:115.10.1+build1-0ubuntu0.22.04.11:115.11.0+build2-0ubuntu0.22.04.11:115.12.0+build3-0ubuntu0.22.04.11:115.13.0+build5-0ubuntu0.22.04.11:115.15.0+build1-0ubuntu0.22.04.11:115.16.0+build2-0ubuntu0.22.04.11:115.18.0+build1-0ubuntu0.22.04.11:128.12.0+build1-0ubuntu0.22.04.11:140.7.1+build1-0ubuntu0.22.04.1
None known
mozjs102
Ubuntu:24.04:LTS
All versions, plus listed versions
102.15.1-1102.15.1-3ubuntu2
None known
mozjs115
Ubuntu:24.04:LTS
All versions, plus listed versions
115.3.0-0ubuntu1115.4.0-2115.5.0-1115.6.0-1115.7.0-4
Show 4 moreShow less
115.8.0-1115.9.0-1115.9.0-1build1115.10.0-1
None known
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 81 CVEs
before 153.7.0-1.1
153.7.0-1.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, aliases, referencesOSV
affectedOSV
affected, factsOSV
affected, aliases, referencesOSV
affectedOSV
affectedOSV
affectedNVD, OSV
descriptionCVE List
referencesGitHub Advisories
Show 7 moreShow less
History
RecordedChangedSources
referencesEUVD
affected, aliases, referencesNVD, OSV
referencesGitHub Advisories
descriptionCVE List
referencesEUVD, GitHub Advisories, NVD, OSV
cwes, facts, severityCVE List
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-118024 is a high vulnerability (CVSS 8.8) in Mozilla Firefox, published October 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in firefox-esr 153.7.0esr-1~deb12u1.

References

Show 171 moreShow less
This page doesn't list everything

Left out here: 594 versions and the rest of 2 source descriptions. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open