SB2026110538 - Anolis OS update for firefox
Published: November 5, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 17 vulnerabilities.
1) Use-after-free (CVE-ID: CVE-2026-117920)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the DOM: HTML Parser component when parsing HTML. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
2) Buffer overflow (CVE-ID: CVE-2026-118011)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to access to poisoned frame memory in Firefox's CSS Parsing and Computation component when processing styles. A remote attacker can trigger the frame-memory error to potentially crash the affected process.
3) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-117988)
CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape browser sandbox restrictions.
The vulnerability exists due to incorrect handling of boundary conditions in the Graphics: CanvasWebGL component when processing WebGL operations. A remote attacker can trigger mishandled boundary conditions through crafted content to cross the sandbox security boundary.
4) Use-after-free (CVE-ID: CVE-2026-117987)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Graphics component when processing graphics. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
5) Use-after-free (CVE-ID: CVE-2026-117985)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape browser sandbox restrictions.
The vulnerability exists due to use-after-free in the Graphics component when processing graphics. A remote attacker can trigger access to freed memory through crafted content to cross the sandbox security boundary.
6) Use-after-free (CVE-ID: CVE-2026-117971)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escape the browser sandbox.
The vulnerability exists due to use-after-free in the print preview component when processing content for print preview. A remote attacker can supply crafted content that triggers access to freed memory during preview processing to cross the browser sandbox boundary.
7) Use-after-free (CVE-ID: CVE-2026-117936)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
8) Use-after-free (CVE-ID: CVE-2026-117935)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM WebIDL bindings component when processing DOM interface operations. A remote attacker can trigger crafted operations to access freed memory and potentially crash the browser.
9) Use-after-free (CVE-ID: CVE-2026-117925)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the DOM core and HTML component when processing web content. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
10) Improper privilege management (CVE-ID: CVE-2026-100801)
CWE-ID: CWE-269 - Improper Privilege Management
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to escalate privileges.
The vulnerability exists due to improper privilege management in the DLL Services component when processing content. A remote attacker can trigger the component issue to escalate privileges.
11) Use-after-free (CVE-ID: CVE-2026-117916)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the XSLT component when processing transformations. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
12) Use-after-free (CVE-ID: CVE-2026-117913)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the SVG component when processing SVG content. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
13) Use-after-free (CVE-ID: CVE-2026-117906)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the CSS parsing and computation component when processing styles. A remote attacker can supply crafted style content to trigger access to freed memory and potentially crash the browser.
14) Use-after-free (CVE-ID: CVE-2026-117902)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Layout: Text and Fonts component when laying out text. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
15) Use-after-free (CVE-ID: CVE-2026-117875)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service or execute arbitrary code.
The vulnerability exists due to use-after-free in the Layout: Scrolling and Overflow component when processing page layout. A remote attacker can supply crafted content to trigger access to freed memory, potentially causing a crash or code execution.
16) Use-after-free (CVE-ID: CVE-2026-117874)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to potentially cause a denial of service.
The vulnerability exists due to use-after-free in the internationalization component when processing content requiring internationalization operations. A remote attacker can supply crafted content to trigger access to freed memory and potentially crash the browser.
17) Origin validation error (CVE-ID: CVE-2026-117860)
CWE-ID: CWE-346 - Origin Validation Error
CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to bypass the same-origin policy and potentially access cross-origin information.
The vulnerability exists due to improper origin validation in the DOM: Navigation component when handling navigation. A remote attacker can supply crafted web content to cross origin boundaries and potentially access otherwise restricted information.
Remediation
Install update from vendor's website.