| CVE-2026-120572 |
Incorrect boundary conditions in the Layout: Block and Inline component
|
8.8
High
|
Nov 3, 2026 |
| CVE-2026-118027 |
Frame poisoning in the Layout component
|
9.1
Critical
|
Oct 27, 2026 |
| CVE-2026-118024 |
Use-after-free in the Graphics: Text component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118025 |
Other issue in the SVG component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118026 |
Invalid pointer in the JavaScript: GC component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118021 |
Sandbox escape due to use-after-free in the XPCOM component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118022 |
Sandbox escape due to use-after-free in the Disability Access APIs component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118023 |
Sandbox escape due to use-after-free in the Graphics: WebRender component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118019 |
Race condition, use-after-free in the DOM: File component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118020 |
Use-after-free in the Layout component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118016 |
Use-after-free in the DOM: Core & HTML component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118017 |
Use-after-free in the SVG component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118018 |
Spoofing issue in the Downloads component in Firefox for Android
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118014 |
Use-after-free in the JavaScript Engine: JIT component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118015 |
Use-after-free in the DOM: Core & HTML component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118013 |
Use-after-free in the Layout: Images, Video, and HTML Frames component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118010 |
Use-after-free in the Disability Access APIs component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118011 |
Frame poisoning in the CSS Parsing and Computation component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118012 |
Use-after-free in the DOM: Animation component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118007 |
Use-after-free in the JavaScript: GC component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118008 |
Privilege escalation in the DOM: Navigation component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118009 |
Integer overflow, use-after-free in the Graphics: Text component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118005 |
Use-after-free in the WebRTC: Signaling component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118006 |
Privilege escalation due to use-after-free in the WebRTC: Signaling component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118004 |
Incorrect boundary conditions in the CSS Transitions and Animations component
|
8.1
High
|
Oct 27, 2026 |