Main Vulnerability Database SB2026102801

SB2026102801 - Multiple vulnerabilities in Mozilla Firefox

Published: October 28, 2026

Security Bulletin ID SB2026102801

CSH Severity

High

Patch available

YES

Number of vulnerabilities 167

Exploitation vector Remote access

Highest impact Code execution

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 167 vulnerabilities.

1) Use-after-free (CVE-ID: CVE-2026-117938)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the layout component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.

2) Improper isolation or compartmentalization (CVE-ID: CVE-2026-117958)

CWE-ID: CWE-653 - Improper isolation or compartmentalization

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to weaken site isolation and potentially access information across site boundaries.

The vulnerability exists due to insufficient compartmentalization in the Networking: HTTP component when handling HTTP activity. A remote attacker can trigger crafted network activity to undermine separation between sites and potentially access otherwise isolated information.

3) Use-after-free (CVE-ID: CVE-2026-117954)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the positioned layout component when laying out positioned content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.

4) Spoofing attack (CVE-ID: CVE-2026-118018)

CWE-ID: CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to spoof download-related information.

The vulnerability exists due to insufficient protection against spoofing in Firefox for Android's Downloads component when presenting download information. A remote attacker can trigger misleading presentation to potentially deceive the victim about a download.

5) Use-after-free (CVE-ID: CVE-2026-118019)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to a race condition and use-after-free in Firefox's DOM: File component when handling file operations. A remote attacker can trigger unsafe operation interleavings and freed-memory access to potentially crash the process or corrupt its execution.

6) Incorrect calculation (CVE-ID: CVE-2026-117955)

CWE-ID: CWE-682 - Incorrect Calculation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause incorrect WebAssembly execution that may disrupt browser operation.

The vulnerability exists due to incorrect code generation in the JavaScript: WebAssembly component when compiling WebAssembly content. A remote attacker can supply crafted content to trigger miscompilation and potentially cause incorrect execution or browser instability.

7) Improper privilege management (CVE-ID: CVE-2026-100801)

CWE-ID: CWE-269 - Improper Privilege Management

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escalate privileges.

The vulnerability exists due to improper privilege management in the DLL Services component when processing content. A remote attacker can trigger the component issue to escalate privileges.

8) Buffer overflow (CVE-ID: CVE-2026-117956)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to invalid pointer handling in the Nimbus Desktop Client component when processing component input. A remote attacker can supply crafted input to trigger invalid memory access and potentially crash the browser.

9) Cryptographic issues (CVE-ID: CVE-2026-117957)

CWE-ID: CWE-310 - Cryptographic Issues

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially compromise the protection of WebRTC communications.

The vulnerability exists due to a cryptographic weakness in the WebRTC: Networking component when protecting communications. A remote attacker can exploit the cryptographic defect to potentially undermine communication confidentiality or integrity.

10) Improper isolation or compartmentalization (CVE-ID: CVE-2026-117959)

CWE-ID: CWE-653 - Improper isolation or compartmentalization

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to weaken site isolation and potentially access information across site boundaries.

The vulnerability exists due to insufficient compartmentalization in the DOM: Service Workers component when handling service worker activity. A remote attacker can supply crafted content to undermine separation between sites and potentially access otherwise isolated information.

11) Use-after-free (CVE-ID: CVE-2026-117953)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the DOM: Core & HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.

12) Insufficient verification of data authenticity (CVE-ID: CVE-2026-117960)

CWE-ID: CWE-345 - Insufficient Verification of Data Authenticity

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to present misleading content and potentially deceive users.

The vulnerability exists due to insufficient authenticity enforcement in the DOM: Core & HTML component when presenting web content. A remote attacker can supply crafted content to spoof its presentation and potentially mislead users about its authenticity.

13) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117961)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt browser operation.

The vulnerability exists due to incorrect handling of boundary conditions in the Layout: Text and Fonts component when laying out text. A remote attacker can supply crafted content to trigger unexpected behavior that may disrupt browser operation.

14) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117962)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape browser sandbox restrictions.

The vulnerability exists due to incorrect handling of boundary conditions in the Storage: Quota Manager component when processing storage operations. A remote attacker can trigger mishandled boundary conditions through crafted activity to cross the sandbox security boundary.

15) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117963)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt browser operation.

The vulnerability exists due to incorrect handling of boundary conditions in the DOM: Service Workers component when processing service worker activity. A remote attacker can supply crafted content to trigger unexpected behavior that may disrupt browser operation.

16) Use-after-free (CVE-ID: CVE-2026-117964)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the Panning and Zooming component when handling page movement or scaling. A remote attacker can trigger access to freed memory through crafted content, potentially causing a crash or code execution.

17) Origin validation error (CVE-ID: CVE-2026-117965)

CWE-ID: CWE-346 - Origin Validation Error

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to bypass the same-origin policy and potentially access cross-origin information.

The vulnerability exists due to improper origin validation in the Address Bar component when handling navigation input. A remote attacker can supply crafted navigation input to cross origin boundaries and potentially access otherwise restricted information.

18) Protection mechanism failure (CVE-ID: CVE-2026-117966)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to undermine site isolation and potentially access information across site boundaries.

The vulnerability exists due to improper enforcement of site-isolation boundaries in the HTTP networking component when processing network-related content. A remote attacker can supply crafted content to interfere with site separation and potentially access information that should remain isolated.

19) Protection mechanism failure (CVE-ID: CVE-2026-117967)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to bypass browser security restrictions.

The vulnerability exists due to improper enforcement of security controls in the DOM: Security component when processing web content. A remote attacker can supply crafted content to circumvent an intended security restriction.

20) Use-after-free (CVE-ID: CVE-2026-118017)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in Firefox's SVG component when processing SVG content. A remote attacker can trigger access to freed memory to potentially crash the process or corrupt its execution.

21) Use of uninitialized resource (CVE-ID: CVE-2026-117952)

CWE-ID: CWE-908 - Use of Uninitialized Resource

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disclose sensitive information or disrupt browser operation.

The vulnerability exists due to use of uninitialized memory in the networking component when processing network-related input. A remote attacker can supply crafted input to trigger use of indeterminate memory contents, potentially exposing residual information or causing incorrect processing.

22) Use-after-free (CVE-ID: CVE-2026-117968)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.

23) Use-after-free (CVE-ID: CVE-2026-117943)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

24) Origin validation error (CVE-ID: CVE-2026-117860)

CWE-ID: CWE-346 - Origin Validation Error

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to bypass the same-origin policy and potentially access cross-origin information.

The vulnerability exists due to improper origin validation in the DOM: Navigation component when handling navigation. A remote attacker can supply crafted web content to cross origin boundaries and potentially access otherwise restricted information.

25) Use-after-free (CVE-ID: CVE-2026-117939)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the XML component when processing XML content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.

26) Use-after-free (CVE-ID: CVE-2026-117940)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

27) Use-after-free (CVE-ID: CVE-2026-118013)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in Firefox's Layout: Images, Video, and HTML Frames component when laying out content. A remote attacker can trigger access to freed memory to potentially crash the process or corrupt its execution.

28) Use-after-free (CVE-ID: CVE-2026-117941)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the DOM CSS object model component when processing style-related DOM operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.

29) Input validation error (CVE-ID: CVE-2026-117942)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt script processing or cause a denial of service.

The vulnerability exists due to improper handling of boundary conditions in the JavaScript engine's just-in-time compilation component when processing scripts. A remote attacker can supply crafted script content to trigger incorrect boundary handling and potentially disrupt script execution or browser operation.

30) Use-after-free (CVE-ID: CVE-2026-118014)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in Firefox's JavaScript Engine: JIT component when processing scripts. A remote attacker can trigger access to freed memory to potentially crash the process or corrupt its execution.

31) Use-after-free (CVE-ID: CVE-2026-117944)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

32) Use-after-free (CVE-ID: CVE-2026-117951)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

33) Use-after-free (CVE-ID: CVE-2026-118015)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in Firefox's DOM: Core & HTML component when processing documents. A remote attacker can trigger access to freed memory to potentially crash the process or corrupt its execution.

34) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117945)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt browser operation.

The vulnerability exists due to incorrect handling of boundary conditions in the XML component when processing XML content. A remote attacker can supply crafted content to trigger unexpected behavior that may disrupt browser operation.

35) Use-after-free (CVE-ID: CVE-2026-118016)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

36) Input validation error (CVE-ID: CVE-2026-117946)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt script processing or cause a denial of service.

The vulnerability exists due to improper handling of boundary conditions in the JavaScript engine when processing scripts. A remote attacker can supply crafted script content to trigger incorrect boundary handling and potentially disrupt script execution or browser operation.

37) Use-after-free (CVE-ID: CVE-2026-117947)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the XML component when processing XML content. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.

38) Use-after-free (CVE-ID: CVE-2026-117948)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the SVG component when processing SVG content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.

39) Use-after-free (CVE-ID: CVE-2026-117949)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

40) Input validation error (CVE-ID: CVE-2026-117950)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt web content processing or cause a denial of service.

The vulnerability exists due to improper handling of boundary conditions in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt browser operation.

41) Use-after-free (CVE-ID: CVE-2026-118020)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in Firefox's Layout component when laying out content. A remote attacker can trigger access to freed memory to potentially crash the process or corrupt its execution.

42) Buffer overflow (CVE-ID: CVE-2026-117969)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to invalid pointer handling in the JavaScript Engine: JIT component when processing scripts. A remote attacker can supply crafted scripts to trigger invalid memory access and potentially crash the browser.

43) Use-after-free (CVE-ID: CVE-2026-117936)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

44) Use-after-free (CVE-ID: CVE-2026-117997)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape browser sandbox restrictions.

The vulnerability exists due to use-after-free in the Widget component when processing widget operations. A remote attacker can trigger access to freed memory through crafted activity to cross the sandbox security boundary.

45) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117990)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape browser sandbox restrictions.

The vulnerability exists due to incorrect handling of boundary conditions in the Graphics: WebRender component when rendering content. A remote attacker can trigger mishandled boundary conditions through crafted content to cross the sandbox security boundary.

46) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117991)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt browser operation.

47) Information disclosure (CVE-ID: CVE-2026-117992)

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to unintended information exposure in the CSS parsing and computation component when processing styles. A remote attacker can supply crafted style content to obtain information that should not be exposed.

48) Integer overflow (CVE-ID: CVE-2026-117993)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt browser operation through incorrect integer calculations.

The vulnerability exists due to integer overflow in the Graphics: Text component when calculating values for text processing. A remote attacker can supply crafted content to exceed an integer's representable range, potentially causing incorrect calculations or browser instability.

49) Use-after-free (CVE-ID: CVE-2026-117994)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the JavaScript: GC component when managing object lifetimes. A remote attacker can supply crafted scripts to trigger access to freed memory, potentially causing a crash or code execution.

50) Improper privilege management (CVE-ID: CVE-2026-117995)

CWE-ID: CWE-269 - Improper Privilege Management

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escalate privileges.

The vulnerability exists due to improper privilege management in the DOM: UI Events & Focus Handling component when handling events and focus. A remote attacker can trigger crafted event or focus behavior to gain privileges beyond those intended.

51) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117996)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt browser operation.

The vulnerability exists due to incorrect handling of boundary conditions in the WebRTC component when processing real-time communication activity. A remote attacker can trigger crafted activity to cause unexpected behavior that may disrupt browser operation.

52) Use-after-free (CVE-ID: CVE-2026-118024)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in Firefox's Graphics: Text component when processing text. A remote attacker can trigger access to freed memory to potentially crash the process or corrupt its execution.

53) Use-after-free (CVE-ID: CVE-2026-117989)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the Graphics component when processing graphics. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.

54) Protection mechanism failure (CVE-ID: CVE-2026-118025)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to insufficient implementation of security measures in SVG component. A remote attacker can bypass implemented security restrictions.

55) Protection mechanism failure (CVE-ID: CVE-2026-117998)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to bypass browser security restrictions.

The vulnerability exists due to improper enforcement of security controls in the DOM: Push Subscriptions component when handling push subscriptions. A remote attacker can trigger crafted subscription-related behavior to circumvent an intended security restriction.

56) Race condition (CVE-ID: CVE-2026-117999)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt browser operation.

The vulnerability exists due to a race condition in the IPC component when concurrent operations access shared state. A remote attacker can trigger competing operations to produce inconsistent state and potentially disrupt browser operation.

57) Information disclosure (CVE-ID: CVE-2026-118000)

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to insufficient protection of information in the Networking: HTTP component when handling HTTP activity. A remote attacker can trigger crafted network activity to obtain information that should remain inaccessible.

58) Race condition (CVE-ID: CVE-2026-118002)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to a race condition in the Networking component when concurrent network operations access shared state. A remote attacker can trigger competing operations to expose information that should remain inaccessible.

59) Information disclosure (CVE-ID: CVE-2026-118003)

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to insufficient protection of information in the Networking: DNS component when processing name-resolution activity. A remote attacker can trigger crafted network activity to obtain information that should remain inaccessible.

60) Buffer overflow (CVE-ID: CVE-2026-118026)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to an invalid pointer in Firefox's JavaScript: GC component when performing garbage collection. A remote attacker can trigger invalid memory access to potentially crash the affected process.

61) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-118004)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt browser operation.

The vulnerability exists due to incorrect handling of boundary conditions in the CSS Transitions and Animations component when processing animated styles. A remote attacker can supply crafted content to trigger unexpected behavior that may disrupt browser operation.

62) Use-after-free (CVE-ID: CVE-2026-118023)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape sandbox restrictions.

The vulnerability exists due to use-after-free in Firefox's Graphics: WebRender component when rendering content. A remote attacker can trigger access to freed memory to access capabilities outside the intended sandbox.

63) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117988)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape browser sandbox restrictions.

The vulnerability exists due to incorrect handling of boundary conditions in the Graphics: CanvasWebGL component when processing WebGL operations. A remote attacker can trigger mishandled boundary conditions through crafted content to cross the sandbox security boundary.

64) Race condition (CVE-ID: CVE-2026-117970)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt browser operation.

The vulnerability exists due to a race condition in the Disability Access APIs component when concurrent operations access shared state. A remote attacker can trigger competing operations to produce inconsistent state and potentially disrupt browser operation.

65) Input validation error (CVE-ID: CVE-2026-117978)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt graphics processing or cause a denial of service.

The vulnerability exists due to improper handling of boundary conditions in the graphics component when processing graphical content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.

66) Use-after-free (CVE-ID: CVE-2026-117971)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape the browser sandbox.

The vulnerability exists due to use-after-free in the print preview component when processing content for print preview. A remote attacker can supply crafted content that triggers access to freed memory during preview processing to cross the browser sandbox boundary.

67) Use-after-free (CVE-ID: CVE-2026-117972)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

68) Use-after-free (CVE-ID: CVE-2026-118021)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape sandbox restrictions.

The vulnerability exists due to use-after-free in Firefox's XPCOM component when handling component operations. A remote attacker can trigger access to freed memory to access capabilities outside the intended sandbox.

69) Use-after-free (CVE-ID: CVE-2026-117973)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the Networking: DNS component when processing name-resolution activity. A remote attacker can trigger access to freed memory through crafted network activity, potentially causing a crash or code execution.

70) Use-after-free (CVE-ID: CVE-2026-117974)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

71) Buffer overflow (CVE-ID: CVE-2026-117975)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape browser sandbox restrictions.

The vulnerability exists due to invalid pointer handling in the Graphics: WebRender component when rendering content. A remote attacker can trigger invalid memory access through crafted content to cross the sandbox security boundary.

72) Improper isolation or compartmentalization (CVE-ID: CVE-2026-117976)

CWE-ID: CWE-653 - Improper isolation or compartmentalization

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to weaken site isolation and potentially access information across site boundaries.

The vulnerability exists due to insufficient compartmentalization in the DOM: Navigation component when handling navigation. A remote attacker can supply crafted navigation content to undermine separation between sites and potentially access otherwise isolated information.

73) Protection mechanism failure (CVE-ID: CVE-2026-117977)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to insufficient implementation of security measures in Console component. A remote attacker can bypass implemented security restrictions.

74) Input validation error (CVE-ID: CVE-2026-117979)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt rendering or cause a denial of service.

The vulnerability exists due to improper handling of boundary conditions in the WebRender graphics component when rendering content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.

75) Use-after-free (CVE-ID: CVE-2026-117987)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

76) Use-after-free (CVE-ID: CVE-2026-117980)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

77) Improper privilege management (CVE-ID: CVE-2026-117981)

CWE-ID: CWE-269 - Improper Privilege Management

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escalate privileges.

The vulnerability exists due to improper privilege management in the Toolkit component when handling component operations. A remote attacker can exploit the component's privilege handling to gain privileges beyond those intended.

78) Buffer overflow (CVE-ID: CVE-2026-117982)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

79) Use-after-free (CVE-ID: CVE-2026-117983)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

80) Use-after-free (CVE-ID: CVE-2026-118022)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape sandbox restrictions.

The vulnerability exists due to use-after-free in Firefox's Disability Access APIs component when handling accessibility operations. A remote attacker can trigger access to freed memory to access capabilities outside the intended sandbox.

81) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117984)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt browser operation.

The vulnerability exists due to incorrect handling of boundary conditions in the Layout: Scrolling and Overflow component when processing page layout. A remote attacker can supply crafted content to trigger unexpected behavior that may disrupt browser operation.

82) Use-after-free (CVE-ID: CVE-2026-117985)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape browser sandbox restrictions.

The vulnerability exists due to use-after-free in the Graphics component when processing graphics. A remote attacker can trigger access to freed memory through crafted content to cross the sandbox security boundary.

83) Use-after-free (CVE-ID: CVE-2026-117986)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

84) Buffer overflow (CVE-ID: CVE-2026-117937)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to improper handling of an invalid pointer in the JavaScript engine when processing scripts. A remote attacker can supply crafted script content to trigger an invalid memory access and potentially crash the browser.

85) Use-after-free (CVE-ID: CVE-2026-117935)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the DOM WebIDL bindings component when processing DOM interface operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.

86) Use-after-free (CVE-ID: CVE-2026-117884)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the networking component when processing network-related content. A remote attacker can supply crafted input to trigger access to freed memory and potentially crash the browser.

87) Input validation error (CVE-ID: CVE-2026-117879)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt page layout or cause a denial of service.

The vulnerability exists due to improper handling of boundary conditions in the table layout component when laying out table content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.

88) Improper privilege management (CVE-ID: CVE-2026-118008)

CWE-ID: CWE-269 - Improper Privilege Management

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escalate privileges.

The vulnerability exists due to improper privilege enforcement in Firefox's DOM: Navigation component when handling navigation. A remote attacker can exercise the affected functionality to gain privileges beyond the intended security context.

89) Use-after-free (CVE-ID: CVE-2026-117880)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

90) Integer overflow (CVE-ID: CVE-2026-118009)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to integer overflow and use-after-free in Firefox's Graphics: Text component when processing text. A remote attacker can trigger arithmetic errors and access to freed memory to potentially crash the process or corrupt its execution.

91) Use-after-free (CVE-ID: CVE-2026-117881)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

92) Use-after-free (CVE-ID: CVE-2026-117882)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

93) Use-after-free (CVE-ID: CVE-2026-117883)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the DOM HTML parser when parsing HTML content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.

94) Use-after-free (CVE-ID: CVE-2026-117885)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the Layout: Grid component when laying out grids. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.

95) Use-after-free (CVE-ID: CVE-2026-118007)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in Firefox's JavaScript: GC component when performing garbage collection. A remote attacker can trigger access to freed memory to potentially crash the process or corrupt its execution.

96) Input validation error (CVE-ID: CVE-2026-117886)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt text rendering or cause a denial of service.

The vulnerability exists due to improper handling of boundary conditions in the text graphics component when processing text for rendering. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.

97) Use-after-free (CVE-ID: CVE-2026-117887)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

98) Use-after-free (CVE-ID: CVE-2026-118010)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

99) Use of uninitialized resource (CVE-ID: CVE-2026-117888)

CWE-ID: CWE-908 - Use of Uninitialized Resource

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disclose memory contents or disrupt browser operation.

The vulnerability exists due to use of uninitialized memory in the Graphics: Canvas2D component when processing canvas operations. A remote attacker can trigger use of indeterminate memory values through crafted content, potentially exposing residual data or causing incorrect behavior.

100) Input validation error (CVE-ID: CVE-2026-117889)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt script processing or cause a denial of service.

101) Incorrect calculation (CVE-ID: CVE-2026-117890)

CWE-ID: CWE-682 - Incorrect Calculation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause incorrect script execution that may disrupt browser operation.

The vulnerability exists due to incorrect code generation in the JavaScript Engine: JIT component when compiling scripts. A remote attacker can supply crafted scripts to trigger miscompilation and potentially cause incorrect execution or browser instability.

102) Use-after-free (CVE-ID: CVE-2026-117891)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the JavaScript engine's just-in-time compilation component when processing scripts. A remote attacker can supply crafted script content to trigger access to freed memory and potentially crash the browser.

103) Use-after-free (CVE-ID: CVE-2026-117892)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escalate privileges.

The vulnerability exists due to use-after-free in the WebRTC networking component when processing WebRTC network operations. A remote attacker can trigger crafted operations to access freed memory and escalate privileges.

104) Use-after-free (CVE-ID: CVE-2026-117878)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the IndexedDB storage component when processing database operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.

105) Use-after-free (CVE-ID: CVE-2026-117877)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the Layout: Text and Fonts component when laying out text. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.

106) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117894)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt browser operation.

The vulnerability exists due to incorrect handling of boundary conditions in the WebRTC: Signaling component when processing signaling activity. A remote attacker can trigger crafted signaling activity to cause unexpected behavior that may disrupt browser operation.

107) Protection mechanism failure (CVE-ID: CVE-2026-117868)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape the browser sandbox.

The vulnerability exists due to improper enforcement of sandbox restrictions in the DOM networking component when handling network-related operations. A remote attacker can trigger crafted operations to cross the browser sandbox boundary.

108) Protection mechanism failure (CVE-ID: CVE-2026-117861)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape browser sandbox restrictions.

The vulnerability exists due to insufficient isolation in the DOM: Navigation component when handling navigation. A remote attacker can exploit crafted navigation behavior to cross the sandbox security boundary.

109) Input validation error (CVE-ID: CVE-2026-117862)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escalate privileges.

The vulnerability exists due to improper handling of boundary conditions in the networking component when processing network-related input. A remote attacker can supply crafted input to trigger incorrect boundary handling and escalate privileges.

110) Use of uninitialized resource (CVE-ID: CVE-2026-117863)

CWE-ID: CWE-908 - Use of Uninitialized Resource

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to use of uninitialized memory in the audio/video component when processing media content. A remote attacker can supply crafted media content to trigger use of uninitialized memory and disclose information from that memory.

111) Protection mechanism failure (CVE-ID: CVE-2026-117864)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escape browser sandbox restrictions.

The vulnerability exists due to insufficient isolation in the Form Manager component when handling forms. A remote attacker can trigger crafted form-related behavior to cross the sandbox security boundary.

112) Use-after-free (CVE-ID: CVE-2026-117865)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the JavaScript: GC component when managing object lifetimes. A remote attacker can supply crafted script content to trigger access to freed memory, potentially causing a crash or code execution.

113) Use-after-free (CVE-ID: CVE-2026-117866)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escalate privileges.

The vulnerability exists due to use-after-free in the Canvas2D graphics component when processing canvas content. A remote attacker can supply crafted content to trigger access to freed memory and escalate privileges.

114) Use-after-free (CVE-ID: CVE-2026-117867)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

115) Use-after-free (CVE-ID: CVE-2026-117869)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

116) Use-after-free (CVE-ID: CVE-2026-118006)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to escalate privileges.

The vulnerability exists due to use-after-free in Firefox's WebRTC: Signaling component when handling signaling operations. A remote attacker can trigger access to freed memory to gain privileges beyond the intended security context.

117) Use-after-free (CVE-ID: CVE-2026-117870)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the JavaScript engine when processing scripts. A remote attacker can supply crafted script content to trigger access to freed memory and potentially crash the browser.

118) Buffer overflow (CVE-ID: CVE-2026-117871)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to invalid pointer handling in the Graphics component when processing graphics. A remote attacker can supply crafted graphical content to trigger invalid memory access and potentially crash the browser.

119) Use-after-free (CVE-ID: CVE-2026-117872)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the JavaScript standard library when processing script operations. A remote attacker can supply crafted script content to trigger access to freed memory and potentially crash the browser.

120) Input validation error (CVE-ID: CVE-2026-117873)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt media playback or cause a denial of service.

The vulnerability exists due to improper handling of boundary conditions in the audio/video playback component when processing media content. A remote attacker can supply crafted media input to trigger incorrect boundary handling and potentially disrupt playback or browser operation.

121) Use-after-free (CVE-ID: CVE-2026-118005)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in Firefox's WebRTC: Signaling component when handling signaling operations. A remote attacker can trigger access to freed memory to potentially crash the process or corrupt its execution.

122) Use-after-free (CVE-ID: CVE-2026-117874)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the internationalization component when processing content requiring internationalization operations. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.

123) Use-after-free (CVE-ID: CVE-2026-117875)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the Layout: Scrolling and Overflow component when processing page layout. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.

124) Use-after-free (CVE-ID: CVE-2026-117876)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the text and fonts layout component when laying out text content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.

125) Input validation error (CVE-ID: CVE-2026-117893)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially interfere with security-related processing.

The vulnerability exists due to improper handling of boundary conditions in the security PSM component when processing security-related input. A remote attacker can supply crafted input to trigger incorrect boundary handling and potentially disrupt security-related operations.

126) Use-after-free (CVE-ID: CVE-2026-117895)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

127) Use-after-free (CVE-ID: CVE-2026-118012)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in Firefox's DOM: Animation component when processing animations. A remote attacker can trigger access to freed memory to potentially crash the process or corrupt its execution.

128) Input validation error (CVE-ID: CVE-2026-117926)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt SVG processing or cause a denial of service.

The vulnerability exists due to improper handling of boundary conditions in the SVG component when processing SVG content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.

129) Use-after-free (CVE-ID: CVE-2026-117919)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

130) Use-after-free (CVE-ID: CVE-2026-117920)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the DOM: HTML Parser component when parsing HTML. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.

131) Use-after-free (CVE-ID: CVE-2026-117921)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the CSS parsing and computation component when processing styles. A remote attacker can supply crafted style content to trigger access to freed memory and potentially crash the browser.

132) Use-after-free (CVE-ID: CVE-2026-117922)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the WebSockets networking component when processing WebSocket operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.

133) Use-after-free (CVE-ID: CVE-2026-117923)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the audio/video component when processing media content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.

134) Use-after-free (CVE-ID: CVE-2026-117924)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the XSLT component when processing transformations. A remote attacker can supply crafted transformation content to trigger access to freed memory and potentially crash the browser.

135) Use-after-free (CVE-ID: CVE-2026-117925)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

136) Use-after-free (CVE-ID: CVE-2026-117927)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

137) Buffer overflow (CVE-ID: CVE-2026-117917)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to improper handling of an invalid pointer in the WebRender graphics component when rendering content. A remote attacker can supply crafted content to trigger an invalid memory access and potentially crash the browser.

138) Origin validation error (CVE-ID: CVE-2026-117928)

CWE-ID: CWE-346 - Origin Validation Error

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to bypass the same-origin policy and potentially access cross-origin information.

The vulnerability exists due to improper origin validation in the CSS Parsing and Computation component when processing styles. A remote attacker can supply crafted web content to cross origin boundaries and potentially access otherwise restricted information.

139) Use-after-free (CVE-ID: CVE-2026-117929)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

140) Use-after-free (CVE-ID: CVE-2026-117930)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

141) Use-after-free (CVE-ID: CVE-2026-117931)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the DOM events component when processing events. A remote attacker can trigger crafted event operations to access freed memory and potentially crash the browser.

142) Use-after-free (CVE-ID: CVE-2026-117932)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

143) Use-after-free (CVE-ID: CVE-2026-117933)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to unsafe access to poisoned layout-frame memory in the CSS Parsing and Computation component when processing styles. A remote attacker can supply crafted content to trigger invalid frame access and potentially crash the browser.

144) Use-after-free (CVE-ID: CVE-2026-117934)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

145) Buffer overflow (CVE-ID: CVE-2026-118011)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to access to poisoned frame memory in Firefox's CSS Parsing and Computation component when processing styles. A remote attacker can trigger the frame-memory error to potentially crash the affected process.

146) Use-after-free (CVE-ID: CVE-2026-117918)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

147) Use-after-free (CVE-ID: CVE-2026-117916)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the XSLT component when processing transformations. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.

148) Use-after-free (CVE-ID: CVE-2026-117896)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

149) Use-after-free (CVE-ID: CVE-2026-117905)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the audio/video playback component when processing media playback. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.

150) Input validation error (CVE-ID: CVE-2026-117897)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt page layout or cause a denial of service.

151) Use-after-free (CVE-ID: CVE-2026-117898)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the JavaScript Engine: JIT component when processing scripts. A remote attacker can supply crafted scripts to trigger access to freed memory, potentially causing a crash or code execution.

152) Use-after-free (CVE-ID: CVE-2026-117899)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the HTTP networking component when processing HTTP-related input. A remote attacker can supply crafted input to trigger access to freed memory and potentially crash the browser.

153) Use-after-free (CVE-ID: CVE-2026-117900)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the DOM editor component when processing editing operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.

154) Use-after-free (CVE-ID: CVE-2026-117901)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

155) Use-after-free (CVE-ID: CVE-2026-117902)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

156) Use-after-free (CVE-ID: CVE-2026-117903)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

157) Use-after-free (CVE-ID: CVE-2026-117904)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

158) Use-after-free (CVE-ID: CVE-2026-117906)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

159) Input validation error (CVE-ID: CVE-2026-117915)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially disrupt page layout or cause a denial of service.

The vulnerability exists due to improper handling of boundary conditions in the block and inline layout component when laying out web content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.

160) Use-after-free (CVE-ID: CVE-2026-117907)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

161) Use-after-free (CVE-ID: CVE-2026-117908)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to use-after-free in the ImageLib graphics component when processing image content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.

162) Use-after-free (CVE-ID: CVE-2026-117909)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

163) Buffer overflow (CVE-ID: CVE-2026-117910)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

The vulnerability exists due to invalid pointer handling in the JavaScript Engine component when processing scripts. A remote attacker can supply crafted scripts to trigger invalid memory access and potentially crash the browser.

164) Use-after-free (CVE-ID: CVE-2026-117911)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

165) Origin validation error (CVE-ID: CVE-2026-117912)

CWE-ID: CWE-346 - Origin Validation Error

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to bypass the same-origin policy and potentially access information across origin boundaries.

The vulnerability exists due to improper enforcement of the same-origin policy in the CSS parsing and computation component when processing styles involving different origins. A remote attacker can supply crafted style content to bypass origin restrictions and potentially obtain information that should be isolated.

166) Use-after-free (CVE-ID: CVE-2026-117913)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.

The vulnerability exists due to use-after-free in the SVG component when processing SVG content. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.

167) Use-after-free (CVE-ID: CVE-2026-117914)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to potentially cause a denial of service.

Remediation

Install update from vendor's website.

SB2026102801 - Multiple vulnerabilities in Mozilla Firefox

Breakdown by Severity

Description

Remediation

References

Please verify you're human