Threat database

4,191 threats

Severity	CVSS	Threat	Source	Published
High	–	CVE-2026-118016Mozilla Firefox · Use-after-free in the DOM: Core & HTML component High2026-10-27CVE Database V5CVE-2026-118016 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118015Mozilla Firefox · Use-after-free in the DOM: Core & HTML component High2026-10-27CVE Database V5CVE-2026-118015 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118014Mozilla Firefox · Use-after-free in the JavaScript Engine: JIT component High2026-10-27CVE Database V5CVE-2026-118014 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118013Mozilla Firefox · Use-after-free in the Layout: Images, Video, and HTML Frames component High2026-10-27CVE Database V5CVE-2026-118013 Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118012Mozilla Firefox · Use-after-free in the DOM: Animation component High2026-10-27CVE Database V5CVE-2026-118012 Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118011Mozilla Firefox · Frame poisoning in the CSS Parsing and Computation component High2026-10-27CVE Database V5CVE-2026-118011 Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118010Mozilla Firefox · Use-after-free in the Disability Access APIs component High2026-10-27CVE Database V5CVE-2026-118010 Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118009Mozilla Firefox · Integer overflow, use-after-free in the Graphics: Text component High2026-10-27CVE Database V5CVE-2026-118009 Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability	CVE Database V5	2026-10-27
High	8.8	CVE-2026-118008Mozilla Firefox · Privilege escalation in the DOM: Navigation component High8.82026-10-27CVE Database V5CVE-2026-118008 Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability CWE-269	CVE Database V5	2026-10-27
High	–	CVE-2026-118007Mozilla Firefox · Use-after-free in the JavaScript: GC component High2026-10-27CVE Database V5CVE-2026-118007 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118006Mozilla Firefox · Privilege escalation due to use-after-free in the WebRTC: Signaling component High2026-10-27CVE Database V5CVE-2026-118006 Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118005Mozilla Firefox · Use-after-free in the WebRTC: Signaling component High2026-10-27CVE Database V5CVE-2026-118005 Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118004Mozilla Firefox · Incorrect boundary conditions in the CSS Transitions and Animations component High2026-10-27CVE Database V5CVE-2026-118004 Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118003Mozilla Firefox · Information disclosure in the Networking: DNS component High2026-10-27CVE Database V5CVE-2026-118003 Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118002Mozilla Firefox · Information disclosure due to race condition in the Networking component High2026-10-27CVE Database V5CVE-2026-118002 Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-118000Mozilla Firefox · Information disclosure in the Networking: HTTP component High2026-10-27CVE Database V5CVE-2026-118000 Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-117999Mozilla Firefox · Race Condition in the IPC Component High2026-10-27CVE Database V5CVE-2026-117999 Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-117998Mozilla Firefox · Mitigation bypass in the DOM: Push Subscriptions component High2026-10-27CVE Database V5CVE-2026-117998 Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-117997Mozilla Firefox · Sandbox escape due to use-after-free in the Widget component High2026-10-27CVE Database V5CVE-2026-117997 Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Vulnerability	CVE Database V5	2026-10-27
High	–	CVE-2026-117996Mozilla Firefox · Incorrect boundary conditions in the WebRTC component High2026-10-27CVE Database V5CVE-2026-117996 Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Vulnerability	CVE Database V5	2026-10-27

Page 38 of 261