Advisories · Technology

Mozilla Firefox.

Every CVE that names Mozilla Firefox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-117967 CVE record

CVSS 8.8 High

Mitigation bypass in the DOM: Security component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 27 Oct 2026
CVE-2026-117966 CVE record

CVSS 8.1 High

Site isolation issue in the Networking: HTTP component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-346
Not analysed yet 27 Oct 2026
CVE-2026-117965 CVE record

CVSS 8.1 High

Same-origin policy bypass in the Address Bar component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-346
Not analysed yet 27 Oct 2026
CVE-2026-117964 CVE record

CVSS 8.8 High

Use-after-free in the Panning and Zooming component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117963 CVE record

CVSS 8.1 High

Incorrect boundary conditions in the DOM: Service Workers component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117962 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117961 CVE record

CVSS 8.1 High

Incorrect boundary conditions in the Layout: Text and Fonts component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117960 CVE record

CVSS 4.7 Medium

Spoofing issue in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-451
Not analysed yet 27 Oct 2026
CVE-2026-117959 CVE record

CVSS 8.1 High

Site isolation issue in the DOM: Service Workers component
- Mozilla Firefox
- Mozilla Thunderbird
- Broken access control
Not analysed yet 27 Oct 2026
CVE-2026-117958 CVE record

CVSS 8.1 High

Site isolation issue in the Networking: HTTP component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-346
Not analysed yet 27 Oct 2026
CVE-2026-117957 CVE record

CVSS 8.1 High

Cryptographic issue in the WebRTC: Networking component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-325
Not analysed yet 27 Oct 2026
CVE-2026-117956 CVE record

CVSS 8.8 High

Invalid pointer in the Nimbus Desktop Client component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117955 CVE record

CVSS 8.1 High

JIT miscompilation in the JavaScript: WebAssembly component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117954 CVE record

CVSS 8.8 High

Use-after-free in the Layout: Positioned component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117953 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117952 CVE record

CVSS 8.1 High

Uninitialized memory in the Networking component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117951 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117950 CVE record

CVSS 8.8 High

Incorrect boundary conditions in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117949 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117948 CVE record

CVSS 6.3 Medium

Use-after-free in the SVG component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117947 CVE record

CVSS 6.3 Medium

Use-after-free in the XML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117946 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Incorrect boundary conditions in the JavaScript Engine component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117945 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Incorrect boundary conditions in the XML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117944 CVE record

CVSS 6.3 Medium

Use-after-free in the Layout component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117943 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117942 CVE record

CVSS 7.3 High

Incorrect boundary conditions in the JavaScript Engine: JIT component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117941 CVE record

CVSS 8.8 High

Use-after-free in the DOM: CSS Object Model component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117940 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117939 CVE record

CVSS 6.3 Medium

Use-after-free in the XML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117938 CVE record

CVSS 6.3 Medium

Use-after-free in the Layout component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117937 CVE record

CVSS 7.3 High

Invalid pointer in the JavaScript Engine component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117936 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117935 CVE record

CVSS 6.3 Medium

Use-after-free in the DOM: Bindings (WebIDL) component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117934 CVE record

CVSS 6.3 Medium

Use-after-free in the Layout component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117933 CVE record

CVSS 5.4 Medium

Frame poisoning in the CSS Parsing and Computation component
- Mozilla Firefox
- Mozilla Thunderbird
- Denial of service
Not analysed yet 27 Oct 2026
CVE-2026-117932 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117931 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Events component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117930 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Bindings (WebIDL) component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117929 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117928 CVE record

CVSS 8.1 High

Same-origin policy bypass in the CSS Parsing and Computation component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-346
Not analysed yet 27 Oct 2026
CVE-2026-117927 CVE record

CVSS 6.3 Medium

Use-after-free in the SVG component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117926 CVE record

CVSS 8.1 High

Incorrect boundary conditions in the SVG component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117925 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117924 CVE record

CVSS 6.3 Medium

Use-after-free in the XSLT component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117923 CVE record

CVSS 6.3 Medium

Use-after-free in the Audio/Video component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117922 CVE record

CVSS 8.8 High

Use-after-free in the Networking: WebSockets component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117921 CVE record

CVSS 8.8 High

Use-after-free in the CSS Parsing and Computation component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117920 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Use-after-free in the DOM: HTML Parser component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117919 CVE record

CVSS 8.8 High

Use-after-free in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117918 CVE record

CVSS 8.8 High

Use-after-free in the Graphics: Canvas2D component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117917 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Invalid pointer in the Graphics: WebRender component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117916 CVE record

CVSS 6.3 Medium

Use-after-free in the XSLT component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117915 CVE record

CVSS 7.3 High

Incorrect boundary conditions in the Layout: Block and Inline component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117914 CVE record

CVSS 6.3 Medium

Use-after-free in the SVG component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117913 CVE record

CVSS 6.3 Medium

Use-after-free in the SVG component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117912 CVE record

CVSS 8.1 High

Same-origin policy bypass in the CSS Parsing and Computation component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-346
Not analysed yet 27 Oct 2026
CVE-2026-117911 CVE record

CVSS 6.3 Medium

Use-after-free in the Audio/Video: Playback component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117910 CVE record

CVSS 7.3 High

Invalid pointer in the JavaScript Engine component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117909 CVE record

CVSS 6.3 Medium

Use-after-free in the JavaScript: GC component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026
CVE-2026-117908 CVE record

CVSS 6.3 Medium

Use-after-free in the Graphics: ImageLib component
- Mozilla Firefox
- Mozilla Thunderbird
- Memory corruption
Not analysed yet 27 Oct 2026