SB2026110113 - SUSE update for MozillaFirefox
Published: November 1, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 147 vulnerabilities.
1) Improper privilege management (CVE-ID: CVE-2026-100801)
CWE-ID: CWE-269 - Improper Privilege Management
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escalate privileges.
The vulnerability exists due to improper privilege management in the DLL Services component when processing content. A remote attacker can trigger the component issue to escalate privileges.
2) Out-of-bounds write (CVE-ID: CVE-2026-111497) Exploited
CWE-ID: CWE-787 - Out-of-bounds write
CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to corrupt process memory, potentially execute arbitrary code, disclose process memory, or cause a denial of service.
The vulnerability exists due to an out-of-bounds write in the Brotli decoder bundled with Node.js when an invalid block switch is treated as a temporary need for input rather than a permanent format error. A remote attacker can supply malformed Brotli data that an application decompresses with node:zlib to make the streaming decoder append bytes beyond an eight-byte internal buffer, potentially causing code execution, process memory disclosure, or a crash.
3) Improper Check for Certificate Revocation (CVE-ID: CVE-2026-113470)
CWE-ID: CWE-299 - Improper Check for Certificate Revocation
CVSSv4: 7.4 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially impersonate trusted websites and intercept sensitive communications using compromised certificates.
The vulnerability exists due to incomplete certificate revocation enforcement in the Security Block-lists, Allow-lists, and other State component when validating certificate chains involving compromised eMudhra intermediate certificates. A remote attacker can present a certificate chain relying on a compromised intermediate certificate to potentially have an untrusted connection accepted as trusted.
The affected scenario involves RemoteSettings being disabled by policy or otherwise unavailable.
4) Origin validation error (CVE-ID: CVE-2026-117860)
CWE-ID: CWE-346 - Origin Validation Error
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to bypass the same-origin policy and potentially access cross-origin information.
The vulnerability exists due to improper origin validation in the DOM: Navigation component when handling navigation. A remote attacker can supply crafted web content to cross origin boundaries and potentially access otherwise restricted information.
5) Protection mechanism failure (CVE-ID: CVE-2026-117861)
CWE-ID: CWE-693 - Protection Mechanism Failure
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape browser sandbox restrictions.
The vulnerability exists due to insufficient isolation in the DOM: Navigation component when handling navigation. A remote attacker can exploit crafted navigation behavior to cross the sandbox security boundary.
6) Input validation error (CVE-ID: CVE-2026-117862)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escalate privileges.
The vulnerability exists due to improper handling of boundary conditions in the networking component when processing network-related input. A remote attacker can supply crafted input to trigger incorrect boundary handling and escalate privileges.
7) Use of uninitialized resource (CVE-ID: CVE-2026-117863)
CWE-ID: CWE-908 - Use of Uninitialized Resource
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to disclose sensitive information.
The vulnerability exists due to use of uninitialized memory in the audio/video component when processing media content. A remote attacker can supply crafted media content to trigger use of uninitialized memory and disclose information from that memory.
8) Protection mechanism failure (CVE-ID: CVE-2026-117864)
CWE-ID: CWE-693 - Protection Mechanism Failure
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape browser sandbox restrictions.
The vulnerability exists due to insufficient isolation in the Form Manager component when handling forms. A remote attacker can trigger crafted form-related behavior to cross the sandbox security boundary.
9) Use-after-free (CVE-ID: CVE-2026-117865)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the JavaScript: GC component when managing object lifetimes. A remote attacker can supply crafted script content to trigger access to freed memory, potentially causing a crash or code execution.
10) Use-after-free (CVE-ID: CVE-2026-117866)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escalate privileges.
The vulnerability exists due to use-after-free in the Canvas2D graphics component when processing canvas content. A remote attacker can supply crafted content to trigger access to freed memory and escalate privileges.
11) Use-after-free (CVE-ID: CVE-2026-117867)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the layout component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
12) Protection mechanism failure (CVE-ID: CVE-2026-117868)
CWE-ID: CWE-693 - Protection Mechanism Failure
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape the browser sandbox.
The vulnerability exists due to improper enforcement of sandbox restrictions in the DOM networking component when handling network-related operations. A remote attacker can trigger crafted operations to cross the browser sandbox boundary.
13) Use-after-free (CVE-ID: CVE-2026-117869)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
14) Use-after-free (CVE-ID: CVE-2026-117870)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the JavaScript engine when processing scripts. A remote attacker can supply crafted script content to trigger access to freed memory and potentially crash the browser.
15) Buffer overflow (CVE-ID: CVE-2026-117871)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to invalid pointer handling in the Graphics component when processing graphics. A remote attacker can supply crafted graphical content to trigger invalid memory access and potentially crash the browser.
16) Use-after-free (CVE-ID: CVE-2026-117872)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the JavaScript standard library when processing script operations. A remote attacker can supply crafted script content to trigger access to freed memory and potentially crash the browser.
17) Input validation error (CVE-ID: CVE-2026-117873)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt media playback or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the audio/video playback component when processing media content. A remote attacker can supply crafted media input to trigger incorrect boundary handling and potentially disrupt playback or browser operation.
18) Use-after-free (CVE-ID: CVE-2026-117874)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the internationalization component when processing content requiring internationalization operations. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
19) Use-after-free (CVE-ID: CVE-2026-117875)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Layout: Scrolling and Overflow component when processing page layout. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
20) Use-after-free (CVE-ID: CVE-2026-117876)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the text and fonts layout component when laying out text content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
21) Use-after-free (CVE-ID: CVE-2026-117877)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Layout: Text and Fonts component when laying out text. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
22) Use-after-free (CVE-ID: CVE-2026-117878)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the IndexedDB storage component when processing database operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.
23) Input validation error (CVE-ID: CVE-2026-117879)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt page layout or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the table layout component when laying out table content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.
24) Use-after-free (CVE-ID: CVE-2026-117880)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the XML component when processing XML content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
25) Use-after-free (CVE-ID: CVE-2026-117881)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
26) Use-after-free (CVE-ID: CVE-2026-117882)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the layout component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
27) Use-after-free (CVE-ID: CVE-2026-117883)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM HTML parser when parsing HTML content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
28) Use-after-free (CVE-ID: CVE-2026-117884)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the networking component when processing network-related content. A remote attacker can supply crafted input to trigger access to freed memory and potentially crash the browser.
29) Use-after-free (CVE-ID: CVE-2026-117885)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Layout: Grid component when laying out grids. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
30) Input validation error (CVE-ID: CVE-2026-117886)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt text rendering or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the text graphics component when processing text for rendering. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.
31) Use-after-free (CVE-ID: CVE-2026-117887)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
32) Use of uninitialized resource (CVE-ID: CVE-2026-117888)
CWE-ID: CWE-908 - Use of Uninitialized Resource
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disclose memory contents or disrupt browser operation.
The vulnerability exists due to use of uninitialized memory in the Graphics: Canvas2D component when processing canvas operations. A remote attacker can trigger use of indeterminate memory values through crafted content, potentially exposing residual data or causing incorrect behavior.
33) Input validation error (CVE-ID: CVE-2026-117889)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt script processing or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the JavaScript engine when processing scripts. A remote attacker can supply crafted script content to trigger incorrect boundary handling and potentially disrupt script execution or browser operation.
34) Incorrect calculation (CVE-ID: CVE-2026-117890)
CWE-ID: CWE-682 - Incorrect Calculation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to cause incorrect script execution that may disrupt browser operation.
The vulnerability exists due to incorrect code generation in the JavaScript Engine: JIT component when compiling scripts. A remote attacker can supply crafted scripts to trigger miscompilation and potentially cause incorrect execution or browser instability.
35) Use-after-free (CVE-ID: CVE-2026-117891)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the JavaScript engine's just-in-time compilation component when processing scripts. A remote attacker can supply crafted script content to trigger access to freed memory and potentially crash the browser.
36) Use-after-free (CVE-ID: CVE-2026-117892)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escalate privileges.
The vulnerability exists due to use-after-free in the WebRTC networking component when processing WebRTC network operations. A remote attacker can trigger crafted operations to access freed memory and escalate privileges.
37) Input validation error (CVE-ID: CVE-2026-117893)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially interfere with security-related processing.
The vulnerability exists due to improper handling of boundary conditions in the security PSM component when processing security-related input. A remote attacker can supply crafted input to trigger incorrect boundary handling and potentially disrupt security-related operations.
38) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117894)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt browser operation.
The vulnerability exists due to incorrect handling of boundary conditions in the WebRTC: Signaling component when processing signaling activity. A remote attacker can trigger crafted signaling activity to cause unexpected behavior that may disrupt browser operation.
39) Use-after-free (CVE-ID: CVE-2026-117895)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
40) Use-after-free (CVE-ID: CVE-2026-117896)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
41) Input validation error (CVE-ID: CVE-2026-117897)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt page layout or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the table layout component when laying out table content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.
42) Use-after-free (CVE-ID: CVE-2026-117898)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the JavaScript Engine: JIT component when processing scripts. A remote attacker can supply crafted scripts to trigger access to freed memory, potentially causing a crash or code execution.
43) Use-after-free (CVE-ID: CVE-2026-117899)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the HTTP networking component when processing HTTP-related input. A remote attacker can supply crafted input to trigger access to freed memory and potentially crash the browser.
44) Use-after-free (CVE-ID: CVE-2026-117900)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM editor component when processing editing operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.
45) Use-after-free (CVE-ID: CVE-2026-117901)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
46) Use-after-free (CVE-ID: CVE-2026-117902)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Layout: Text and Fonts component when laying out text. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
47) Use-after-free (CVE-ID: CVE-2026-117903)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the audio/video component when processing media content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
48) Use-after-free (CVE-ID: CVE-2026-117904)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the JavaScript: GC component when managing object lifetimes. A remote attacker can supply crafted scripts to trigger access to freed memory, potentially causing a crash or code execution.
49) Use-after-free (CVE-ID: CVE-2026-117905)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the audio/video playback component when processing media playback. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
50) Use-after-free (CVE-ID: CVE-2026-117906)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the CSS parsing and computation component when processing styles. A remote attacker can supply crafted style content to trigger access to freed memory and potentially crash the browser.
51) Use-after-free (CVE-ID: CVE-2026-117907)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the networking component when processing network-related content. A remote attacker can supply crafted input to trigger access to freed memory and potentially crash the browser.
52) Use-after-free (CVE-ID: CVE-2026-117908)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the ImageLib graphics component when processing image content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
53) Use-after-free (CVE-ID: CVE-2026-117909)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the JavaScript: GC component when managing object lifetimes. A remote attacker can supply crafted scripts to trigger access to freed memory, potentially causing a crash or code execution.
54) Buffer overflow (CVE-ID: CVE-2026-117910)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to invalid pointer handling in the JavaScript Engine component when processing scripts. A remote attacker can supply crafted scripts to trigger invalid memory access and potentially crash the browser.
55) Use-after-free (CVE-ID: CVE-2026-117911)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the audio/video playback component when processing media playback. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
56) Origin validation error (CVE-ID: CVE-2026-117912)
CWE-ID: CWE-346 - Origin Validation Error
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to bypass the same-origin policy and potentially access information across origin boundaries.
The vulnerability exists due to improper enforcement of the same-origin policy in the CSS parsing and computation component when processing styles involving different origins. A remote attacker can supply crafted style content to bypass origin restrictions and potentially obtain information that should be isolated.
57) Use-after-free (CVE-ID: CVE-2026-117913)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the SVG component when processing SVG content. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
58) Use-after-free (CVE-ID: CVE-2026-117914)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the SVG component when processing SVG content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
59) Input validation error (CVE-ID: CVE-2026-117915)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt page layout or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the block and inline layout component when laying out web content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.
60) Use-after-free (CVE-ID: CVE-2026-117916)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the XSLT component when processing transformations. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
61) Buffer overflow (CVE-ID: CVE-2026-117917)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to improper handling of an invalid pointer in the WebRender graphics component when rendering content. A remote attacker can supply crafted content to trigger an invalid memory access and potentially crash the browser.
62) Use-after-free (CVE-ID: CVE-2026-117918)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the Canvas2D graphics component when processing canvas content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
63) Use-after-free (CVE-ID: CVE-2026-117919)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
64) Use-after-free (CVE-ID: CVE-2026-117920)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the DOM: HTML Parser component when parsing HTML. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
65) Use-after-free (CVE-ID: CVE-2026-117921)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the CSS parsing and computation component when processing styles. A remote attacker can supply crafted style content to trigger access to freed memory and potentially crash the browser.
66) Use-after-free (CVE-ID: CVE-2026-117922)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the WebSockets networking component when processing WebSocket operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.
67) Use-after-free (CVE-ID: CVE-2026-117923)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the audio/video component when processing media content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
68) Use-after-free (CVE-ID: CVE-2026-117924)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the XSLT component when processing transformations. A remote attacker can supply crafted transformation content to trigger access to freed memory and potentially crash the browser.
69) Use-after-free (CVE-ID: CVE-2026-117925)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
70) Input validation error (CVE-ID: CVE-2026-117926)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt SVG processing or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the SVG component when processing SVG content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.
71) Use-after-free (CVE-ID: CVE-2026-117927)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the SVG component when processing SVG content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
72) Origin validation error (CVE-ID: CVE-2026-117928)
CWE-ID: CWE-346 - Origin Validation Error
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to bypass the same-origin policy and potentially access cross-origin information.
The vulnerability exists due to improper origin validation in the CSS Parsing and Computation component when processing styles. A remote attacker can supply crafted web content to cross origin boundaries and potentially access otherwise restricted information.
73) Use-after-free (CVE-ID: CVE-2026-117929)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
74) Use-after-free (CVE-ID: CVE-2026-117930)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM WebIDL bindings component when processing DOM interface operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.
75) Use-after-free (CVE-ID: CVE-2026-117931)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM events component when processing events. A remote attacker can trigger crafted event operations to access freed memory and potentially crash the browser.
76) Use-after-free (CVE-ID: CVE-2026-117932)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the DOM: Core & HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
77) Use-after-free (CVE-ID: CVE-2026-117933)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to unsafe access to poisoned layout-frame memory in the CSS Parsing and Computation component when processing styles. A remote attacker can supply crafted content to trigger invalid frame access and potentially crash the browser.
78) Use-after-free (CVE-ID: CVE-2026-117934)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the layout component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
79) Use-after-free (CVE-ID: CVE-2026-117935)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM WebIDL bindings component when processing DOM interface operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.
80) Use-after-free (CVE-ID: CVE-2026-117936)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
81) Buffer overflow (CVE-ID: CVE-2026-117937)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to improper handling of an invalid pointer in the JavaScript engine when processing scripts. A remote attacker can supply crafted script content to trigger an invalid memory access and potentially crash the browser.
82) Use-after-free (CVE-ID: CVE-2026-117938)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the layout component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
83) Use-after-free (CVE-ID: CVE-2026-117939)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the XML component when processing XML content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
84) Use-after-free (CVE-ID: CVE-2026-117940)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the DOM: Core & HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
85) Use-after-free (CVE-ID: CVE-2026-117941)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM CSS object model component when processing style-related DOM operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.
86) Input validation error (CVE-ID: CVE-2026-117942)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt script processing or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the JavaScript engine's just-in-time compilation component when processing scripts. A remote attacker can supply crafted script content to trigger incorrect boundary handling and potentially disrupt script execution or browser operation.
87) Use-after-free (CVE-ID: CVE-2026-117943)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
88) Use-after-free (CVE-ID: CVE-2026-117944)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the layout component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
89) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117945)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt browser operation.
The vulnerability exists due to incorrect handling of boundary conditions in the XML component when processing XML content. A remote attacker can supply crafted content to trigger unexpected behavior that may disrupt browser operation.
90) Input validation error (CVE-ID: CVE-2026-117946)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt script processing or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the JavaScript engine when processing scripts. A remote attacker can supply crafted script content to trigger incorrect boundary handling and potentially disrupt script execution or browser operation.
91) Use-after-free (CVE-ID: CVE-2026-117947)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the XML component when processing XML content. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
92) Use-after-free (CVE-ID: CVE-2026-117948)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the SVG component when processing SVG content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
93) Use-after-free (CVE-ID: CVE-2026-117949)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
94) Input validation error (CVE-ID: CVE-2026-117950)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt web content processing or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt browser operation.
95) Use-after-free (CVE-ID: CVE-2026-117951)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
96) Use of uninitialized resource (CVE-ID: CVE-2026-117952)
CWE-ID: CWE-908 - Use of Uninitialized Resource
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disclose sensitive information or disrupt browser operation.
The vulnerability exists due to use of uninitialized memory in the networking component when processing network-related input. A remote attacker can supply crafted input to trigger use of indeterminate memory contents, potentially exposing residual information or causing incorrect processing.
97) Use-after-free (CVE-ID: CVE-2026-117953)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the DOM: Core & HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
98) Use-after-free (CVE-ID: CVE-2026-117954)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the positioned layout component when laying out positioned content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
99) Incorrect calculation (CVE-ID: CVE-2026-117955)
CWE-ID: CWE-682 - Incorrect Calculation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to cause incorrect WebAssembly execution that may disrupt browser operation.
The vulnerability exists due to incorrect code generation in the JavaScript: WebAssembly component when compiling WebAssembly content. A remote attacker can supply crafted content to trigger miscompilation and potentially cause incorrect execution or browser instability.
100) Buffer overflow (CVE-ID: CVE-2026-117956)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to invalid pointer handling in the Nimbus Desktop Client component when processing component input. A remote attacker can supply crafted input to trigger invalid memory access and potentially crash the browser.
101) Cryptographic issues (CVE-ID: CVE-2026-117957)
CWE-ID: CWE-310 - Cryptographic Issues
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially compromise the protection of WebRTC communications.
The vulnerability exists due to a cryptographic weakness in the WebRTC: Networking component when protecting communications. A remote attacker can exploit the cryptographic defect to potentially undermine communication confidentiality or integrity.
102) Improper isolation or compartmentalization (CVE-ID: CVE-2026-117958)
CWE-ID: CWE-653 - Improper isolation or compartmentalization
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to weaken site isolation and potentially access information across site boundaries.
The vulnerability exists due to insufficient compartmentalization in the Networking: HTTP component when handling HTTP activity. A remote attacker can trigger crafted network activity to undermine separation between sites and potentially access otherwise isolated information.
103) Improper isolation or compartmentalization (CVE-ID: CVE-2026-117959)
CWE-ID: CWE-653 - Improper isolation or compartmentalization
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to weaken site isolation and potentially access information across site boundaries.
The vulnerability exists due to insufficient compartmentalization in the DOM: Service Workers component when handling service worker activity. A remote attacker can supply crafted content to undermine separation between sites and potentially access otherwise isolated information.
104) Insufficient verification of data authenticity (CVE-ID: CVE-2026-117960)
CWE-ID: CWE-345 - Insufficient Verification of Data Authenticity
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to present misleading content and potentially deceive users.
The vulnerability exists due to insufficient authenticity enforcement in the DOM: Core & HTML component when presenting web content. A remote attacker can supply crafted content to spoof its presentation and potentially mislead users about its authenticity.
105) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117961)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt browser operation.
The vulnerability exists due to incorrect handling of boundary conditions in the Layout: Text and Fonts component when laying out text. A remote attacker can supply crafted content to trigger unexpected behavior that may disrupt browser operation.
106) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117962)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape browser sandbox restrictions.
The vulnerability exists due to incorrect handling of boundary conditions in the Storage: Quota Manager component when processing storage operations. A remote attacker can trigger mishandled boundary conditions through crafted activity to cross the sandbox security boundary.
107) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117963)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt browser operation.
The vulnerability exists due to incorrect handling of boundary conditions in the DOM: Service Workers component when processing service worker activity. A remote attacker can supply crafted content to trigger unexpected behavior that may disrupt browser operation.
108) Use-after-free (CVE-ID: CVE-2026-117964)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Panning and Zooming component when handling page movement or scaling. A remote attacker can trigger access to freed memory through crafted content, potentially causing a crash or code execution.
109) Origin validation error (CVE-ID: CVE-2026-117965)
CWE-ID: CWE-346 - Origin Validation Error
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to bypass the same-origin policy and potentially access cross-origin information.
The vulnerability exists due to improper origin validation in the Address Bar component when handling navigation input. A remote attacker can supply crafted navigation input to cross origin boundaries and potentially access otherwise restricted information.
110) Protection mechanism failure (CVE-ID: CVE-2026-117966)
CWE-ID: CWE-693 - Protection Mechanism Failure
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to undermine site isolation and potentially access information across site boundaries.
The vulnerability exists due to improper enforcement of site-isolation boundaries in the HTTP networking component when processing network-related content. A remote attacker can supply crafted content to interfere with site separation and potentially access information that should remain isolated.
111) Protection mechanism failure (CVE-ID: CVE-2026-117967)
CWE-ID: CWE-693 - Protection Mechanism Failure
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to bypass browser security restrictions.
The vulnerability exists due to improper enforcement of security controls in the DOM: Security component when processing web content. A remote attacker can supply crafted content to circumvent an intended security restriction.
112) Use-after-free (CVE-ID: CVE-2026-117968)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
113) Buffer overflow (CVE-ID: CVE-2026-117969)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to invalid pointer handling in the JavaScript Engine: JIT component when processing scripts. A remote attacker can supply crafted scripts to trigger invalid memory access and potentially crash the browser.
114) Race condition (CVE-ID: CVE-2026-117970)
CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSSv4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt browser operation.
The vulnerability exists due to a race condition in the Disability Access APIs component when concurrent operations access shared state. A remote attacker can trigger competing operations to produce inconsistent state and potentially disrupt browser operation.
115) Use-after-free (CVE-ID: CVE-2026-117971)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape the browser sandbox.
The vulnerability exists due to use-after-free in the print preview component when processing content for print preview. A remote attacker can supply crafted content that triggers access to freed memory during preview processing to cross the browser sandbox boundary.
116) Use-after-free (CVE-ID: CVE-2026-117972)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Graphics component when processing graphics. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
117) Use-after-free (CVE-ID: CVE-2026-117973)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Networking: DNS component when processing name-resolution activity. A remote attacker can trigger access to freed memory through crafted network activity, potentially causing a crash or code execution.
118) Use-after-free (CVE-ID: CVE-2026-117974)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the XML component when processing XML content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
119) Buffer overflow (CVE-ID: CVE-2026-117975)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape browser sandbox restrictions.
The vulnerability exists due to invalid pointer handling in the Graphics: WebRender component when rendering content. A remote attacker can trigger invalid memory access through crafted content to cross the sandbox security boundary.
120) Improper isolation or compartmentalization (CVE-ID: CVE-2026-117976)
CWE-ID: CWE-653 - Improper isolation or compartmentalization
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to weaken site isolation and potentially access information across site boundaries.
The vulnerability exists due to insufficient compartmentalization in the DOM: Navigation component when handling navigation. A remote attacker can supply crafted navigation content to undermine separation between sites and potentially access otherwise isolated information.
121) Protection mechanism failure (CVE-ID: CVE-2026-117977)
CWE-ID: CWE-693 - Protection Mechanism Failure
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to insufficient implementation of security measures in Console component. A remote attacker can bypass implemented security restrictions.
122) Input validation error (CVE-ID: CVE-2026-117978)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt graphics processing or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the graphics component when processing graphical content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.
123) Input validation error (CVE-ID: CVE-2026-117979)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt rendering or cause a denial of service.
The vulnerability exists due to improper handling of boundary conditions in the WebRender graphics component when rendering content. A remote attacker can supply crafted content to trigger incorrect boundary handling and potentially disrupt rendering or browser operation.
124) Use-after-free (CVE-ID: CVE-2026-117980)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Graphics component when processing graphics. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
125) Improper privilege management (CVE-ID: CVE-2026-117981)
CWE-ID: CWE-269 - Improper Privilege Management
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escalate privileges.
The vulnerability exists due to improper privilege management in the Toolkit component when handling component operations. A remote attacker can exploit the component's privilege handling to gain privileges beyond those intended.
126) Buffer overflow (CVE-ID: CVE-2026-117982)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to invalid pointer handling in the JavaScript Engine: JIT component when processing scripts. A remote attacker can supply crafted scripts to trigger invalid memory access and potentially crash the browser.
127) Use-after-free (CVE-ID: CVE-2026-117983)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Graphics component when processing graphics. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
128) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117984)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt browser operation.
The vulnerability exists due to incorrect handling of boundary conditions in the Layout: Scrolling and Overflow component when processing page layout. A remote attacker can supply crafted content to trigger unexpected behavior that may disrupt browser operation.
129) Use-after-free (CVE-ID: CVE-2026-117985)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape browser sandbox restrictions.
The vulnerability exists due to use-after-free in the Graphics component when processing graphics. A remote attacker can trigger access to freed memory through crafted content to cross the sandbox security boundary.
130) Use-after-free (CVE-ID: CVE-2026-117986)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Graphics component when processing graphics. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
131) Use-after-free (CVE-ID: CVE-2026-117987)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Graphics component when processing graphics. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
132) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117988)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape browser sandbox restrictions.
The vulnerability exists due to incorrect handling of boundary conditions in the Graphics: CanvasWebGL component when processing WebGL operations. A remote attacker can trigger mishandled boundary conditions through crafted content to cross the sandbox security boundary.
133) Use-after-free (CVE-ID: CVE-2026-117989)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Graphics component when processing graphics. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
134) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117990)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape browser sandbox restrictions.
The vulnerability exists due to incorrect handling of boundary conditions in the Graphics: WebRender component when rendering content. A remote attacker can trigger mishandled boundary conditions through crafted content to cross the sandbox security boundary.
135) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117991)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt browser operation.
The vulnerability exists due to incorrect handling of boundary conditions in the Layout: Text and Fonts component when laying out text. A remote attacker can supply crafted content to trigger unexpected behavior that may disrupt browser operation.
136) Information disclosure (CVE-ID: CVE-2026-117992)
CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to disclose sensitive information.
The vulnerability exists due to unintended information exposure in the CSS parsing and computation component when processing styles. A remote attacker can supply crafted style content to obtain information that should not be exposed.
137) Integer overflow (CVE-ID: CVE-2026-117993)
CWE-ID: CWE-190 - Integer overflow
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt browser operation through incorrect integer calculations.
The vulnerability exists due to integer overflow in the Graphics: Text component when calculating values for text processing. A remote attacker can supply crafted content to exceed an integer's representable range, potentially causing incorrect calculations or browser instability.
138) Use-after-free (CVE-ID: CVE-2026-117994)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the JavaScript: GC component when managing object lifetimes. A remote attacker can supply crafted scripts to trigger access to freed memory, potentially causing a crash or code execution.
139) Improper privilege management (CVE-ID: CVE-2026-117995)
CWE-ID: CWE-269 - Improper Privilege Management
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escalate privileges.
The vulnerability exists due to improper privilege management in the DOM: UI Events & Focus Handling component when handling events and focus. A remote attacker can trigger crafted event or focus behavior to gain privileges beyond those intended.
140) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117996)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt browser operation.
The vulnerability exists due to incorrect handling of boundary conditions in the WebRTC component when processing real-time communication activity. A remote attacker can trigger crafted activity to cause unexpected behavior that may disrupt browser operation.
141) Use-after-free (CVE-ID: CVE-2026-117997)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape browser sandbox restrictions.
The vulnerability exists due to use-after-free in the Widget component when processing widget operations. A remote attacker can trigger access to freed memory through crafted activity to cross the sandbox security boundary.
142) Protection mechanism failure (CVE-ID: CVE-2026-117998)
CWE-ID: CWE-693 - Protection Mechanism Failure
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to bypass browser security restrictions.
The vulnerability exists due to improper enforcement of security controls in the DOM: Push Subscriptions component when handling push subscriptions. A remote attacker can trigger crafted subscription-related behavior to circumvent an intended security restriction.
143) Race condition (CVE-ID: CVE-2026-117999)
CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSSv4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt browser operation.
The vulnerability exists due to a race condition in the IPC component when concurrent operations access shared state. A remote attacker can trigger competing operations to produce inconsistent state and potentially disrupt browser operation.
144) Information disclosure (CVE-ID: CVE-2026-118000)
CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to disclose sensitive information.
The vulnerability exists due to insufficient protection of information in the Networking: HTTP component when handling HTTP activity. A remote attacker can trigger crafted network activity to obtain information that should remain inaccessible.
145) Race condition (CVE-ID: CVE-2026-118002)
CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSSv4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to disclose sensitive information.
The vulnerability exists due to a race condition in the Networking component when concurrent network operations access shared state. A remote attacker can trigger competing operations to expose information that should remain inaccessible.
146) Information disclosure (CVE-ID: CVE-2026-118003)
CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to disclose sensitive information.
The vulnerability exists due to insufficient protection of information in the Networking: DNS component when processing name-resolution activity. A remote attacker can trigger crafted network activity to obtain information that should remain inaccessible.
147) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-118004)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially disrupt browser operation.
The vulnerability exists due to incorrect handling of boundary conditions in the CSS Transitions and Animations component when processing animated styles. A remote attacker can supply crafted content to trigger unexpected behavior that may disrupt browser operation.
Remediation
Install update from vendor's website.