CVE-2026-118022 is a use-after-free vulnerability in the Disability Access APIs component of Firefox that allows sandbox escape. This security flaw was addressed and fixed in Firefox version 159. The vulnerability is considered high impact due to its potential to break out of the browser sandbox.
CVE-2026-118021 is a use-after-free vulnerability in the XPCOM component of Firefox that allows sandbox escape. This security flaw was addressed and fixed in Firefox version 159. The vulnerability is classified as high impact due to its potential to break sandbox protections.
CVE-2026-118023 is a use-after-free vulnerability in the Graphics: WebRender component of Firefox that allows sandbox escape. This vulnerability was fixed in Firefox version 159. The issue could enable an attacker to break out of the browser's sandbox environment, potentially leading to elevated privileges or code execution outside the intended security boundaries.
CVE-2026-118017 is a use-after-free vulnerability in the SVG component of Firefox. This security flaw was addressed and fixed in Firefox version 159. The vulnerability is classified with high impact by the vendor.
A use-after-free vulnerability exists in the JavaScript Engine's JIT component of Firefox. This vulnerability was addressed and fixed in Firefox version 159. The issue could lead to high impact security concerns if exploited.
CVE-2026-118007 is a use-after-free vulnerability in the JavaScript garbage collection (GC) component of Firefox. This flaw was addressed and fixed in Firefox version 159. The vulnerability is rated with high impact by the vendor.
CVE-2026-118015 is a use-after-free vulnerability in the DOM Core and HTML component of Firefox. This security flaw was addressed and fixed in Firefox version 159. The vulnerability is classified with high impact due to the potential security risks associated with use-after-free bugs in browser components.
CVE-2026-118010 is a use-after-free vulnerability in the Disability Access APIs component of Firefox. This vulnerability has been assigned a high impact rating by Mozilla and was fixed in Firefox version 159. Use-after-free vulnerabilities can lead to memory corruption and potentially allow attackers to execute arbitrary code or cause a denial of service. The issue is part of a broader set of memory safety vulnerabilities addressed in the same Firefox release.
CVE-2026-118011 is a high-impact security vulnerability involving frame poisoning in the CSS Parsing and Computation component of Firefox. This flaw was addressed and fixed in Firefox version 159. The vulnerability could potentially allow attackers to manipulate CSS frame parsing, leading to security issues. No public exploit code or in-the-wild exploitation has been reported. Users are advised to update to Firefox 159 or later to mitigate this vulnerability.
CVE-2026-118008 is a high-severity privilege escalation vulnerability in the DOM Navigation component of Firefox. This flaw allows an attacker to escalate privileges within the browser environment. The vulnerability was fixed in Firefox version 159.
CVE-2026-118013 is a use-after-free vulnerability in the Layout: Images, Video, and HTML Frames component of Firefox. This flaw was addressed and fixed in Firefox version 159. The vulnerability is classified with high impact due to potential memory safety issues. No active exploitation in the wild has been reported. Users of affected Firefox versions should upgrade to version 159 or later to remediate this issue.
A spoofing vulnerability was identified in the Downloads component of Firefox for Android. This security issue could allow an attacker to deceive users by presenting misleading information related to downloads. The vulnerability was addressed and fixed in Firefox version 159.
A use-after-free vulnerability in the WebRTC signaling component of Firefox could allow privilege escalation. This flaw was addressed and fixed in Firefox version 159. The vulnerability is rated with high impact by the vendor.
CVE-2026-118016 is a use-after-free vulnerability in the DOM Core & HTML component of Firefox. This security flaw was addressed and fixed in Firefox version 159. The vulnerability is classified with high impact due to its potential to cause memory safety issues. No known exploits in the wild have been reported. Users are advised to update to Firefox 159 or later to mitigate this issue.
CVE-2026-118009 is a high-impact vulnerability involving an integer overflow and use-after-free flaw in the Graphics: Text component of Firefox. This security issue was addressed and fixed in Firefox version 159. The vulnerability could potentially allow memory corruption leading to security risks if exploited.
CVE-2026-118012 is a use-after-free vulnerability in the DOM Animation component of Firefox. This flaw was addressed and fixed in Firefox version 159. The vulnerability is classified with high impact by the vendor.
A use-after-free vulnerability was identified in the WebRTC signaling component of Firefox. This security flaw was addressed and fixed in Firefox version 159. The vulnerability is considered high impact due to the potential risks associated with use-after-free bugs.
CVE-2026-118003 is an information disclosure vulnerability in the Networking: DNS component of Firefox. This vulnerability was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The issue could potentially allow unauthorized disclosure of information due to flaws in the DNS handling within the browser.
CVE-2026-117998 is a mitigation bypass vulnerability in the DOM Push Subscriptions component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability was rated with high impact by Mozilla. No known exploits in the wild have been reported.
CVE-2026-118002 is an information disclosure vulnerability caused by a race condition in the Networking component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability could potentially allow unauthorized disclosure of information due to timing issues in network operations.