| CVE-2026-118027 |
Frame poisoning in the Layout component
|
9.1
Critical
|
Oct 27, 2026 |
| CVE-2026-117997 |
Sandbox escape due to use-after-free in the Widget component
|
9.6
Critical
|
Oct 27, 2026 |
| CVE-2026-117990 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
|
9.6
Critical
|
Oct 27, 2026 |
| CVE-2026-117988 |
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
9.6
Critical
|
Oct 27, 2026 |
| CVE-2026-117985 |
Sandbox escape due to use-after-free in the Graphics component
|
9.6
Critical
|
Oct 27, 2026 |
| CVE-2026-117982 |
Invalid pointer in the JavaScript Engine: JIT component
|
9.8
Critical
|
Oct 27, 2026 |
| CVE-2026-117980 |
Use-after-free in the Graphics component
|
9.8
Critical
|
Oct 27, 2026 |
| CVE-2026-117981 |
Privilege escalation in the Toolkit component
|
9.8
Critical
|
Oct 27, 2026 |
| CVE-2026-117971 |
Sandbox escape due to use-after-free in the Print Preview component
|
9.6
Critical
|
Oct 27, 2026 |
| CVE-2026-117962 |
Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component
|
9.6
Critical
|
Oct 27, 2026 |
| CVE-2026-117946 |
Incorrect boundary conditions in the JavaScript Engine component
|
9.8
Critical
|
Oct 27, 2026 |
| CVE-2026-117945 |
Incorrect boundary conditions in the XML component
|
9.8
Critical
|
Oct 27, 2026 |
| CVE-2026-117920 |
Use-after-free in the DOM: HTML Parser component
|
9.6
Critical
|
Oct 27, 2026 |
| CVE-2026-117917 |
Invalid pointer in the Graphics: WebRender component
|
9.8
Critical
|
Oct 27, 2026 |
| CVE-2026-117868 |
Sandbox escape in the DOM: Networking component
|
9.6
Critical
|
Oct 27, 2026 |
| CVE-2026-117861 |
Sandbox escape in the DOM: Navigation component
|
9.6
Critical
|
Oct 27, 2026 |
| CVE-2026-117862 |
Privilege escalation due to incorrect boundary conditions in the Networking component
|
9.8
Critical
|
Oct 27, 2026 |
| CVE-2026-113399 |
Incorrect boundary conditions in the SVG component
|
9.8
Critical
|
Oct 20, 2026 |
| CVE-2026-109780 |
Mitigation bypass in the DOM: Core & HTML component
|
9.8
Critical
|
Oct 13, 2026 |
| CVE-2026-109774 |
Invalid pointer, undefined behavior in the DOM: Notifications component
|
9.8
Critical
|
Oct 13, 2026 |
| CVE-2026-109772 |
Same-origin policy bypass in the DevTools component
|
9.1
Critical
|
Oct 13, 2026 |
| CVE-2026-109755 |
Sandbox escape in the DOM: Content Processes component
|
9.6
Critical
|
Oct 13, 2026 |
| CVE-2026-109750 |
Site isolation issue in the DOM: Web Authentication component
|
9.6
Critical
|
Oct 13, 2026 |
| CVE-2026-109745 |
Sandbox escape due to uninitialized memory in the DOM: Web Serial component
|
9.6
Critical
|
Oct 13, 2026 |
| CVE-2026-109740 |
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
|
9.6
Critical
|
Oct 13, 2026 |