Skip to content

Vulnerabilities of Mozilla Firefox

Is your version affected?

CVE Summary Score Published
CVE-2026-117876 Use-after-free in the Layout: Text and Fonts component 6.3 Medium Oct 27, 2026
CVE-2026-117877 Use-after-free in the Layout: Text and Fonts component 6.3 Medium Oct 27, 2026
CVE-2026-117874 Use-after-free in the Internationalization component 6.3 Medium Oct 27, 2026
CVE-2026-117875 Use-after-free in the Layout: Scrolling and Overflow component 6.3 Medium Oct 27, 2026
CVE-2026-117873 Incorrect boundary conditions in the Audio/Video: Playback component 8.1 High Oct 27, 2026
CVE-2026-117871 Invalid pointer in the Graphics component 7.3 High Oct 27, 2026
CVE-2026-117872 Use-after-free in the JavaScript: Standard Library component 8.8 High Oct 27, 2026
CVE-2026-117868 Sandbox escape in the DOM: Networking component 9.6 Critical Oct 27, 2026
CVE-2026-117869 Use-after-free in the DOM: Core & HTML component 8.8 High Oct 27, 2026
CVE-2026-117870 Use-after-free in the JavaScript Engine component 7.3 High Oct 27, 2026
CVE-2026-117866 Privilege escalation due to use-after-free in the Graphics: Canvas2D component 7.3 High Oct 27, 2026
CVE-2026-117867 Use-after-free in the Layout component 7.3 High Oct 27, 2026
CVE-2026-117863 Information disclosure due to uninitialized memory in the Audio/Video component 6.5 Medium Oct 27, 2026
CVE-2026-117864 Sandbox escape in the Form Manager component 8.8 High Oct 27, 2026
CVE-2026-117865 Use-after-free in the JavaScript: GC component 6.3 Medium Oct 27, 2026
CVE-2026-117861 Sandbox escape in the DOM: Navigation component 9.6 Critical Oct 27, 2026
CVE-2026-117862 Privilege escalation due to incorrect boundary conditions in the Networking component 9.8 Critical Oct 27, 2026
CVE-2026-117860 Same-origin policy bypass in the DOM: Navigation component 8.1 High Oct 27, 2026
CVE-2026-113401 Denial-of-service in the PDF Viewer component 6.5 Medium Oct 20, 2026
CVE-2026-113400 Uninitialized memory in the Audio/Video: cubeb component 5.4 Medium Oct 20, 2026
CVE-2026-113399 Incorrect boundary conditions in the SVG component 9.8 Critical Oct 20, 2026
CVE-2026-113470 Cryptographic issue in the Security Block-lists, Allow-lists, and other State component 5.4 Medium Oct 20, 2026
CVE-2026-109782 Mitigation bypass in the File Handling component 8.3 High Oct 13, 2026
CVE-2026-109783 Mitigation bypass in the File Handling component 8.3 High Oct 13, 2026
CVE-2026-109778 Privilege escalation in the WebExtensions component 8.8 High Oct 13, 2026

Other Mozilla products