CVE-2026-117977 is a security vulnerability in the Console component of Firefox. It was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vendor has classified the impact of this vulnerability as high. No specific technical details or exploitation methods are provided in the advisory.
CVE-2026-117976 is a site isolation vulnerability in the DOM Navigation component of Firefox. This security flaw could potentially allow unauthorized access or bypass of site isolation protections. The issue was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by Mozilla.
CVE-2026-117973 is a use-after-free vulnerability in the Networking: DNS component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. There are no known exploits in the wild at this time.
CVE-2026-117974 is a use-after-free vulnerability in the XML component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No public exploit or in-the-wild exploitation has been reported as of the advisory date.
CVE-2026-117975 is a high-impact vulnerability in the Graphics: WebRender component of Firefox that allows sandbox escape due to an invalid pointer. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6.
CVE-2026-117963 is a high-impact vulnerability involving incorrect boundary conditions in the DOM Service Workers component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The issue could potentially allow security breaches related to the Service Workers functionality within the browser's DOM implementation.
CVE-2026-117972 is a use-after-free vulnerability in the Graphics component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported.
CVE-2026-117969 is a high-impact vulnerability involving an invalid pointer in the Just-In-Time (JIT) component of the JavaScript Engine in Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability could potentially lead to memory safety issues, but no exploitation in the wild has been reported.
CVE-2026-117966 is a site isolation vulnerability in the Networking: HTTP component of Firefox. This security issue was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported.
CVE-2026-117964 is a use-after-free vulnerability in the Panning and Zooming component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported.
CVE-2026-117965 is a same-origin policy bypass vulnerability in the Address Bar component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability could allow unauthorized access to resources across different origins, violating the browser's security model.
CVE-2026-117968 is a use-after-free vulnerability in the DOM Core and HTML component of Firefox. This security flaw was resolved in Firefox 159 and the corresponding ESR versions 115.44 and 153.6. The vulnerability is considered high impact due to the potential risks associated with use-after-free bugs in browser components.
CVE-2026-117962 is a sandbox escape vulnerability in the Storage: Quota Manager component of Firefox. It arises from incorrect boundary conditions that could allow an attacker to break out of the sandbox environment. This vulnerability has been fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-117971 is a use-after-free vulnerability in the Print Preview component of Firefox that allows sandbox escape. This security flaw was addressed and fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
CVE-2026-117970 is a race condition vulnerability in the Disability Access APIs component of Firefox. This issue was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. There are no known exploits in the wild, and no affected versions are explicitly listed beyond the fixed versions.
CVE-2026-117967 is a mitigation bypass vulnerability in the DOM Security component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is considered high impact according to the Mozilla advisory.
CVE-2026-117958 is a site isolation vulnerability in the Networking: HTTP component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The issue could potentially impact the browser's security model related to site isolation. No active exploitation in the wild has been reported.
CVE-2026-117960 is a spoofing vulnerability in the DOM Core and HTML components of Firefox. This issue was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is classified with high impact by Mozilla. No active exploitation in the wild has been reported.
A Just-In-Time (JIT) miscompilation vulnerability exists in the JavaScript: WebAssembly component of Firefox. This flaw was addressed and fixed in Firefox 159 and Firefox ESR 153.6. The vulnerability could lead to high impact issues if exploited.
CVE-2026-117959 is a site isolation vulnerability in the DOM Service Workers component of Firefox. This issue was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability has a high impact rating according to the Mozilla advisory. No known exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate the risk.