CVE-2026-117937 is a high-impact vulnerability involving an invalid pointer in the JavaScript Engine component of Firefox. This flaw was addressed and fixed in Firefox 159 and the corresponding ESR releases 115.44 and 153.6. The vulnerability could potentially lead to memory safety issues, but no active exploitation has been reported.
CVE-2026-117934 is a use-after-free vulnerability in the Layout component of Firefox. This security flaw was addressed and fixed in Firefox version 159, Firefox ESR 115.44, and Firefox ESR 153.6. The vulnerability is considered high impact due to the nature of use-after-free bugs, which can lead to memory corruption and potentially allow attackers to execute arbitrary code or cause crashes.
CVE-2026-117933 is a frame poisoning vulnerability in the CSS Parsing and Computation component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor.
CVE-2026-117931 is a use-after-free vulnerability in the DOM Events component of Firefox. This vulnerability was addressed and fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. The issue could potentially lead to high impact security concerns if exploited, but no known exploits are reported in the wild.
CVE-2026-117936 is a use-after-free vulnerability in the DOM Core and HTML component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported.
CVE-2026-117938 is a use-after-free vulnerability in the Layout component of Firefox. This security flaw was addressed and fixed in Firefox 159 and the corresponding ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by Mozilla, indicating significant security concerns if exploited.
CVE-2026-117935 is a use-after-free vulnerability in the DOM: Bindings (WebIDL) component of Firefox. This flaw was addressed and fixed in Firefox 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No public exploits or in-the-wild exploitation have been reported.
CVE-2026-117932 is a use-after-free vulnerability in the DOM Core and HTML component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is considered high impact due to the nature of use-after-free bugs, which can lead to memory corruption and potentially allow attackers to execute arbitrary code or cause a crash.
CVE-2026-117939 is a use-after-free vulnerability in the XML component of Firefox. This security flaw was addressed and fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. The vulnerability has a high impact rating according to the Mozilla advisory. There are no known exploits in the wild at this time.
CVE-2026-117929 is a use-after-free vulnerability in the DOM Core & HTML component of Firefox. This vulnerability was addressed and fixed in Firefox 159 and the corresponding ESR versions 115.44 and 153.6. The issue could potentially allow for memory corruption leading to high impact security consequences.
CVE-2026-117930 is a use-after-free vulnerability in the DOM: Bindings (WebIDL) component of Firefox. This flaw was addressed and fixed in Firefox 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by Mozilla, indicating serious security implications if exploited.
CVE-2026-117920 is a use-after-free vulnerability in the DOM HTML Parser component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate the risk.
CVE-2026-117928 is a same-origin policy bypass vulnerability in the CSS Parsing and Computation component of Firefox. This security flaw could allow an attacker to bypass the browser's same-origin policy, potentially leading to unauthorized access to sensitive information across origins. The issue was addressed and fixed in Firefox version 159 and Firefox ESR 153.6.
CVE-2026-117922 is a use-after-free vulnerability in the Networking: WebSockets component of Firefox. This security flaw was addressed and fixed in Firefox 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported.
CVE-2026-117927 is a use-after-free vulnerability in the SVG component of Firefox. This security flaw was addressed and fixed in Firefox version 159, Firefox ESR 115.44, and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported as of the advisory date.
CVE-2026-117921 is a use-after-free vulnerability in the CSS Parsing and Computation component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported as of the advisory date.
CVE-2026-117923 is a use-after-free vulnerability in the Audio/Video component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported as of the advisory date.
CVE-2026-117925 is a use-after-free vulnerability in the DOM Core & HTML component of Firefox. This flaw was addressed and fixed in Firefox 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by Mozilla.
CVE-2026-117926 is a vulnerability involving incorrect boundary conditions in the SVG component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No public exploit or in-the-wild exploitation has been reported.
CVE-2026-117924 is a use-after-free vulnerability in the XSLT component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is considered high impact but there are no known exploits in the wild at this time.