| CVE-2026-118180 |
Matrix homeserver could redirect the chat session to a local file or network share
|
7.5
High
|
Oct 27, 2026 |
| CVE-2026-118179 |
Request forgery via news: links
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118177 |
Calendar discovery accepted local file and remote network share locations
|
9.1
Critical
|
Oct 27, 2026 |
| CVE-2026-118178 |
RSS feed could redirect its subscription to a local file or network share
|
5.7
Medium
|
Oct 27, 2026 |
| CVE-2026-118176 |
Bypass of remote UNC path restriction in mailbox: URLs
|
8.1
High
|
Oct 27, 2026 |
| CVE-2026-118175 |
Content of other messages could be included when replying to a crafted message
|
7.5
High
|
Oct 27, 2026 |
| CVE-2026-118174 |
Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment
|
6.5
Medium
|
Oct 27, 2026 |
| CVE-2026-118024 |
Use-after-free in the Graphics: Text component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118025 |
Other issue in the SVG component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118026 |
Invalid pointer in the JavaScript: GC component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118021 |
Sandbox escape due to use-after-free in the XPCOM component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118022 |
Sandbox escape due to use-after-free in the Disability Access APIs component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118023 |
Sandbox escape due to use-after-free in the Graphics: WebRender component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118019 |
Race condition, use-after-free in the DOM: File component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118020 |
Use-after-free in the Layout component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118016 |
Use-after-free in the DOM: Core & HTML component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118017 |
Use-after-free in the SVG component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118014 |
Use-after-free in the JavaScript Engine: JIT component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118015 |
Use-after-free in the DOM: Core & HTML component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118013 |
Use-after-free in the Layout: Images, Video, and HTML Frames component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118010 |
Use-after-free in the Disability Access APIs component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118011 |
Frame poisoning in the CSS Parsing and Computation component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118012 |
Use-after-free in the DOM: Animation component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118007 |
Use-after-free in the JavaScript: GC component
|
8.8
High
|
Oct 27, 2026 |
| CVE-2026-118008 |
Privilege escalation in the DOM: Navigation component
|
8.8
High
|
Oct 27, 2026 |