CVE-2026-117997 is a high-impact vulnerability involving a use-after-free flaw in the Widget component of Firefox. This flaw allows sandbox escape, potentially enabling an attacker to break out of the browser's restricted environment. The issue was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-117994 is a use-after-free vulnerability in the JavaScript garbage collection (GC) component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor.
CVE-2026-117995 is a privilege escalation vulnerability in the DOM UI Events & Focus Handling component of Firefox. This security flaw allows an attacker to escalate privileges within the browser environment. The issue was addressed and fixed in Firefox version 159 and Firefox ESR 153.6.
CVE-2026-117991 is a vulnerability involving incorrect boundary conditions in the Layout: Text and Fonts component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The issue was assigned a high impact rating by Mozilla.
An integer overflow vulnerability was identified in the Graphics: Text component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability has a high impact rating according to the Mozilla advisory. There are no known exploits in the wild for this issue.
CVE-2026-117992 is an information disclosure vulnerability in the CSS Parsing and Computation component of Firefox. This flaw could potentially expose sensitive information. The issue was addressed and fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
CVE-2026-117986 is a use-after-free vulnerability in the Graphics component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is considered high impact due to the potential risks associated with use-after-free bugs. No known exploits in the wild have been reported for this issue.
CVE-2026-117984 is a vulnerability involving incorrect boundary conditions in the Layout: Scrolling and Overflow component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The issue is classified with high impact by the vendor.
CVE-2026-117987 is a use-after-free vulnerability in the Graphics component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is classified with high impact by Mozilla, indicating serious security concerns if exploited. No known exploits in the wild have been reported. Users are advised to update to the fixed versions to mitigate the risk.
CVE-2026-117983 is a use-after-free vulnerability in the Graphics component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is considered high impact due to the potential risks associated with use-after-free bugs in browser components.
CVE-2026-117982 is a high-impact vulnerability involving an invalid pointer in the JavaScript Engine's JIT component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The issue could potentially lead to memory safety problems if exploited. No public exploits or in-the-wild activity have been reported. Users should update to the fixed versions to mitigate the risk.
CVE-2026-117981 is a privilege escalation vulnerability in the Toolkit component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported as of the advisory date.
CVE-2026-117985 is a use-after-free vulnerability in the Graphics component of Firefox that allows sandbox escape. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact due to its potential to break sandbox protections.
CVE-2026-117979 is a high-impact vulnerability involving incorrect boundary conditions in the Graphics: WebRender component of Firefox. This flaw was addressed and fixed in Firefox 159 and the corresponding ESR versions 115.44 and 153.6. The vulnerability could potentially lead to security issues related to graphics rendering, but no specific exploitation details are provided.
CVE-2026-117978 is a vulnerability involving incorrect boundary conditions in the Graphics component of Firefox. This flaw was addressed and fixed in Firefox 159 and Firefox ESR versions 115.44 and 153.6. The issue was assigned a high impact rating by Mozilla. No public exploits or in-the-wild exploitation have been reported.
CVE-2026-117980 is a use-after-free vulnerability in the Graphics component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by Mozilla. No known exploits in the wild have been reported.
CVE-2026-117977 is a security vulnerability in the Console component of Firefox. It was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vendor has classified the impact of this vulnerability as high. No specific technical details or exploitation methods are provided in the advisory.
CVE-2026-117976 is a site isolation vulnerability in the DOM Navigation component of Firefox. This security flaw could potentially allow unauthorized access or bypass of site isolation protections. The issue was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by Mozilla.
CVE-2026-117973 is a use-after-free vulnerability in the Networking: DNS component of Firefox. This flaw was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is rated with high impact by the vendor. There are no known exploits in the wild at this time.
CVE-2026-117974 is a use-after-free vulnerability in the XML component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No public exploit or in-the-wild exploitation has been reported as of the advisory date.