| CVE-2026-118177 |
Calendar discovery accepted local file and remote network share locations
|
9.1
Critique
|
27 oct. 2026 |
| CVE-2026-117997 |
Sandbox escape due to use-after-free in the Widget component
|
9.6
Critique
|
27 oct. 2026 |
| CVE-2026-117990 |
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
|
9.6
Critique
|
27 oct. 2026 |
| CVE-2026-117988 |
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
|
9.6
Critique
|
27 oct. 2026 |
| CVE-2026-117985 |
Sandbox escape due to use-after-free in the Graphics component
|
9.6
Critique
|
27 oct. 2026 |
| CVE-2026-117982 |
Invalid pointer in the JavaScript Engine: JIT component
|
9.8
Critique
|
27 oct. 2026 |
| CVE-2026-117980 |
Use-after-free in the Graphics component
|
9.8
Critique
|
27 oct. 2026 |
| CVE-2026-117981 |
Privilege escalation in the Toolkit component
|
9.8
Critique
|
27 oct. 2026 |
| CVE-2026-117971 |
Sandbox escape due to use-after-free in the Print Preview component
|
9.6
Critique
|
27 oct. 2026 |
| CVE-2026-117962 |
Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component
|
9.6
Critique
|
27 oct. 2026 |
| CVE-2026-117946 |
Incorrect boundary conditions in the JavaScript Engine component
|
9.8
Critique
|
27 oct. 2026 |
| CVE-2026-117945 |
Incorrect boundary conditions in the XML component
|
9.8
Critique
|
27 oct. 2026 |
| CVE-2026-117920 |
Use-after-free in the DOM: HTML Parser component
|
9.6
Critique
|
27 oct. 2026 |
| CVE-2026-117917 |
Invalid pointer in the Graphics: WebRender component
|
9.8
Critique
|
27 oct. 2026 |
| CVE-2026-117868 |
Sandbox escape in the DOM: Networking component
|
9.6
Critique
|
27 oct. 2026 |
| CVE-2026-117861 |
Sandbox escape in the DOM: Navigation component
|
9.6
Critique
|
27 oct. 2026 |
| CVE-2026-117862 |
Privilege escalation due to incorrect boundary conditions in the Networking component
|
9.8
Critique
|
27 oct. 2026 |
| CVE-2026-113867 |
Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas
|
9.1
Critique
|
20 oct. 2026 |
| CVE-2026-113399 |
Incorrect boundary conditions in the SVG component
|
9.8
Critique
|
20 oct. 2026 |
| CVE-2026-109780 |
Mitigation bypass in the DOM: Core & HTML component
|
9.8
Critique
|
13 oct. 2026 |
| CVE-2026-109774 |
Invalid pointer, undefined behavior in the DOM: Notifications component
|
9.8
Critique
|
13 oct. 2026 |
| CVE-2026-109772 |
Same-origin policy bypass in the DevTools component
|
9.1
Critique
|
13 oct. 2026 |
| CVE-2026-109755 |
Sandbox escape in the DOM: Content Processes component
|
9.6
Critique
|
13 oct. 2026 |
| CVE-2026-109750 |
Site isolation issue in the DOM: Web Authentication component
|
9.6
Critique
|
13 oct. 2026 |
| CVE-2026-109745 |
Sandbox escape due to uninitialized memory in the DOM: Web Serial component
|
9.6
Critique
|
13 oct. 2026 |