CVE-2026-117912 is a same-origin policy bypass vulnerability in the CSS Parsing and Computation component of Firefox. This security flaw allows bypassing the same-origin policy, which is a critical browser security mechanism. The vulnerability was addressed and fixed in Firefox 159 and the corresponding Firefox ESR versions 115.44 and 153.6.
CVE-2026-117911 is a use-after-free vulnerability in the Audio/Video: Playback component of Firefox. This security flaw was addressed and fixed in Firefox 159 and the corresponding ESR versions 115.44 and 153.6. The vulnerability is considered high impact due to the potential risks associated with use-after-free bugs.
A use-after-free vulnerability was identified in the SVG component of Firefox. This security flaw was addressed and fixed in Firefox version 159, Firefox ESR 115.44, and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor.
CVE-2026-117916 is a use-after-free vulnerability in the XSLT component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is considered high impact due to the nature of use-after-free issues, which can lead to memory corruption and potentially arbitrary code execution.
CVE-2026-117918 is a use-after-free vulnerability in the Graphics: Canvas2D component of Firefox. This security flaw was addressed and fixed in Firefox version 159, Firefox ESR 115.44, and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor.
CVE-2026-117913 is a use-after-free vulnerability in the SVG component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is classified with high impact by the vendor. No public exploits or in-the-wild exploitation have been reported as of the advisory date.
CVE-2026-117919 is a use-after-free vulnerability in the DOM Core and HTML component of Firefox. This security flaw was addressed and fixed in Firefox 159 and the corresponding ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by Mozilla. There is no indication of known exploitation in the wild at this time.
CVE-2026-117915 is a vulnerability involving incorrect boundary conditions in the Layout: Block and Inline component of Firefox. This issue was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor.
CVE-2026-117917 is a high-impact vulnerability involving an invalid pointer in the Graphics: WebRender component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The issue could potentially lead to memory safety problems. No known exploits in the wild have been reported.
CVE-2026-117910 is a vulnerability involving an invalid pointer in the JavaScript Engine component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. No public exploits or in-the-wild exploitation have been reported as of the advisory date.
CVE-2026-117907 is a use-after-free vulnerability in the Networking component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is classified with high impact by the vendor. No known exploits in the wild have been reported.
CVE-2026-117909 is a use-after-free vulnerability in the JavaScript garbage collection (GC) component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by Mozilla. No public exploit code or in-the-wild exploitation has been reported. Users are advised to update to the fixed versions to mitigate the risk.
CVE-2026-117904 is a use-after-free vulnerability in the JavaScript garbage collection (GC) component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported.
CVE-2026-117906 is a use-after-free vulnerability in the CSS Parsing and Computation component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is considered high impact due to the potential risks associated with use-after-free bugs. No known exploits in the wild have been reported as of the advisory date.
CVE-2026-117903 is a use-after-free vulnerability in the Audio/Video component of Firefox. This security flaw was addressed and fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. The vulnerability is rated with high impact by Mozilla.
CVE-2026-117908 is a use-after-free vulnerability in the Graphics: ImageLib component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is considered high impact due to the potential risks associated with use-after-free bugs.
CVE-2026-117905 is a use-after-free vulnerability in the Audio/Video: Playback component of Firefox. This security flaw was addressed and fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. The vulnerability is classified with high impact by Mozilla. No known exploits in the wild have been reported.
CVE-2026-117899 is a use-after-free vulnerability in the Networking: HTTP component of Firefox. This security flaw was addressed and fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor.
CVE-2026-117902 is a use-after-free vulnerability in the Layout: Text and Fonts component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. There are no known exploits in the wild at this time.
CVE-2026-117901 is a use-after-free vulnerability in the DOM Core and HTML component of Firefox. This security flaw was addressed and fixed in Firefox 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by Mozilla. No known exploits in the wild have been reported as of the advisory date.