Skip to content
Mozilla Firefox vulnerabilities
-
mozilla firefox
Incorrect boundary conditions in the Layout: Block and Inline component
CVE-2026-120572
8.8 High
-
mozilla firefox
Frame poisoning in the Layout component
CVE-2026-118027
9.1 Critical
-
mozilla firefox, thunderbird +1 more
Invalid pointer in the JavaScript: GC component
CVE-2026-118026
8.8 High
-
mozilla firefox, thunderbird +1 more
Other issue in the SVG component
CVE-2026-118025
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the Graphics: Text component
CVE-2026-118024
8.8 High
-
mozilla firefox, thunderbird +1 more
Sandbox escape due to use-after-free in the Graphics: WebRender component
CVE-2026-118023
8.8 High
-
mozilla firefox, thunderbird +1 more
Sandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-118022
8.8 High
-
mozilla firefox, thunderbird +1 more
Sandbox escape due to use-after-free in the XPCOM component
CVE-2026-118021
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the Layout component
CVE-2026-118020
8.8 High
-
mozilla firefox, thunderbird +1 more
Race condition, use-after-free in the DOM: File component
CVE-2026-118019
8.8 High
-
mozilla firefox
Spoofing issue in the Downloads component in Firefox for Android
CVE-2026-118018
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the SVG component
CVE-2026-118017
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the DOM: Core & HTML component
CVE-2026-118016
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the DOM: Core & HTML component
CVE-2026-118015
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the JavaScript Engine: JIT component
CVE-2026-118014
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the Layout: Images, Video, and HTML Frames component
CVE-2026-118013
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the DOM: Animation component
CVE-2026-118012
8.8 High
-
mozilla firefox, thunderbird +1 more
Frame poisoning in the CSS Parsing and Computation component
CVE-2026-118011
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the Disability Access APIs component
CVE-2026-118010
8.8 High
-
mozilla firefox, thunderbird +1 more
Integer overflow, use-after-free in the Graphics: Text component
CVE-2026-118009
8.8 High
-
mozilla firefox, thunderbird +1 more
Privilege escalation in the DOM: Navigation component
CVE-2026-118008
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the JavaScript: GC component
CVE-2026-118007
8.8 High
-
mozilla firefox, thunderbird +1 more
Privilege escalation due to use-after-free in the WebRTC: Signaling component
CVE-2026-118006
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the WebRTC: Signaling component
CVE-2026-118005
8.8 High
-
mozilla firefox, thunderbird +1 more
Incorrect boundary conditions in the CSS Transitions and Animations component
CVE-2026-118004
Fix available
8.1 High
-
mozilla firefox, thunderbird +1 more
Information disclosure in the Networking: DNS component
CVE-2026-118003
Fix available
8.1 High
-
mozilla firefox, thunderbird +1 more
Information disclosure due to race condition in the Networking component
CVE-2026-118002
Fix available
8.1 High
-
mozilla firefox, thunderbird +1 more
Information disclosure in the Networking: HTTP component
CVE-2026-118000
Fix available
8.1 High
-
mozilla firefox, thunderbird +1 more
Race condition in the IPC component
CVE-2026-117999
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Mitigation bypass in the DOM: Push Subscriptions component
CVE-2026-117998
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Sandbox escape due to use-after-free in the Widget component
CVE-2026-117997
Fix available
9.6 Critical
-
mozilla firefox, thunderbird +1 more
Incorrect boundary conditions in the WebRTC component
CVE-2026-117996
Fix available
8.1 High
-
mozilla firefox, thunderbird +1 more
Privilege escalation in the DOM: UI Events & Focus Handling component
CVE-2026-117995
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the JavaScript: GC component
CVE-2026-117994
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Integer overflow in the Graphics: Text component
CVE-2026-117993
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Information disclosure in the CSS Parsing and Computation component
CVE-2026-117992
Fix available
6.5 Medium
-
mozilla firefox, thunderbird +1 more
Incorrect boundary conditions in the Layout: Text and Fonts component
CVE-2026-117991
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
CVE-2026-117990
Fix available
9.6 Critical
-
mozilla firefox, thunderbird +1 more
Use-after-free in the Graphics component
CVE-2026-117989
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
CVE-2026-117988
Fix available
9.6 Critical
-
mozilla firefox, thunderbird +1 more
Use-after-free in the Graphics component
CVE-2026-117987
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the Graphics component
CVE-2026-117986
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Sandbox escape due to use-after-free in the Graphics component
CVE-2026-117985
Fix available
9.6 Critical
-
mozilla firefox, thunderbird +1 more
Incorrect boundary conditions in the Layout: Scrolling and Overflow component
CVE-2026-117984
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Use-after-free in the Graphics component
CVE-2026-117983
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Invalid pointer in the JavaScript Engine: JIT component
CVE-2026-117982
Fix available
9.8 Critical
-
mozilla firefox, thunderbird +1 more
Privilege escalation in the Toolkit component
CVE-2026-117981
Fix available
9.8 Critical
-
mozilla firefox, thunderbird +1 more
Use-after-free in the Graphics component
CVE-2026-117980
Fix available
9.8 Critical
-
mozilla firefox, thunderbird +1 more
Incorrect boundary conditions in the Graphics: WebRender component
CVE-2026-117979
Fix available
8.8 High
-
mozilla firefox, thunderbird +1 more
Incorrect boundary conditions in the Graphics component
CVE-2026-117978
Fix available
8.1 High
- Show olderLoading…