[Git][security-tracker-team/security-tracker][master] Add new thunderbird issues from mfsa2026-122
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 27 20:50:54 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
51c42628 by Salvatore Bonaccorso at 2026-10-27T21:49:23+01:00
Add new thunderbird issues from mfsa2026-122
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -224,19 +224,26 @@ CVE-2026-13162 (An OS command vulnerability exists in CoreTec productthat allows
CVE-2026-12887 (In affected versions of Octopus Server, a user with permission to uplo ...)
NOT-FOR-US: Octopus Deploy
CVE-2026-118180 (When logging in to a Matrix account, Thunderbird used the homeserver a ...)
- TODO: check
+ - thunderbird <unfixed>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118180
CVE-2026-118179 (Clicking a news: or snews: link that referenced a message-ID made Thun ...)
- TODO: check
+ - thunderbird <unfixed>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118179
CVE-2026-118178 (A remote RSS feed could use the itunes:new-feed-url or newLocation ele ...)
- TODO: check
+ - thunderbird <unfixed>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118178
CVE-2026-118177 (When looking for calendars in a directory on a server, during account ...)
- TODO: check
+ - thunderbird <unfixed>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118177
CVE-2026-118176 (Thunderbird's check that prevents mailbox: URLs from accessing files o ...)
- TODO: check
+ - thunderbird <unfixed>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118176
CVE-2026-118175 (When replying to, forwarding, or editing a crafted email message as ne ...)
- TODO: check
+ - thunderbird <unfixed>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118175
CVE-2026-118174 (When a message containing an OpenPGP key attachment was displayed, Thu ...)
- TODO: check
+ - thunderbird <unfixed>
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118174
CVE-2026-118173 (MISP Guard, a proxy that enforces security policies on MISP feed data, ...)
NOT-FOR-US: MISP Guard
CVE-2026-118172 (The strapi/strapi (Core Admin / Webhook Runner) package is vulnerable ...)
@@ -320,723 +327,1011 @@ CVE-2026-118005 (Use-after-free in the WebRTC: Signaling component. This vulnera
CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and Animations co ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118004
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118004
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118004
CVE-2026-118003 (Information disclosure in the Networking: DNS component. This vulnerab ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118003
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118003
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118003
CVE-2026-118002 (Information disclosure due to race condition in the Networking compone ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118002
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118002
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118002
CVE-2026-118000 (Information disclosure in the Networking: HTTP component. This vulnera ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118000
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118000
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118000
CVE-2026-117999 (Race condition in the IPC component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117999
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117999
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117999
CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component. This vulne ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117998
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117998
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117998
CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component. This vul ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117997
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117997
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117997
CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This vulnerabil ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117996
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117996
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117996
CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling component. ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117995
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117995
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117995
CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117994
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117994
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117994
CVE-2026-117993 (Integer overflow in the Graphics: Text component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117993
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117993
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117993
CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation component. T ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117992
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117992
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117992
CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117991
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117991
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117991
CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the Graphics: W ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117990
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117990
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117990
CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117989
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117989
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117989
CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the Graphics: C ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117988
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117988
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117988
CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117987
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117987
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117987
CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117986
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117986
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117986
CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics component. This v ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117985
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117985
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117985
CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and Overflow co ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117984
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117984
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117984
CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117983
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117983
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117983
CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117982
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117982
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117982
CVE-2026-117981 (Privilege escalation in the Toolkit component. This vulnerability was ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117981
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117981
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117981
CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117980
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117980
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117980
CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender component. Th ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117979
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117979
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117979
CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This vulnerab ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117978
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117978
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117978
CVE-2026-117977 (Other issue in the Console component. This vulnerability was fixed in ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117977
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117977
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117977
CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This vulnerabil ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117976
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117976
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117976
CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics: WebRender compo ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117975
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117975
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117975
CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117974
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117974
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117974
CVE-2026-117973 (Use-after-free in the Networking: DNS component. This vulnerability wa ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117973
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117973
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117973
CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117972
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117972
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117972
CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview component. T ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117971
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117971
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117971
CVE-2026-117970 (Race condition in the Disability Access APIs component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117970
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117970
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117970
CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117969
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117969
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117969
CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117968
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117968
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117968
CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117967
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117967
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117967
CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117966
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117966
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117966
CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117965
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117965
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117965
CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This vulnerabilit ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117964
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117964
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117964
CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers component. T ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117963
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117963
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117963
CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the Storage: Qu ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117962
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117962
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117962
CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117961
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117961
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117961
CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117960
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117960
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117960
CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component. This vulne ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117959
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117959
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117959
CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117958
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117958
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117958
CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This vulnerab ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117957
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117957
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117957
CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117956
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117956
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117956
CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117955
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117955
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117955
CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117954
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117954
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117954
CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117953
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117953
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117953
CVE-2026-117952 (Uninitialized memory in the Networking component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117952
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117952
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117952
CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117951
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117951
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117951
CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML component. This ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117950
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117950
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117950
CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117949
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117949
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117949
CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117948
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117948
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117948
CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117947
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117947
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117947
CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117946
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117946
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117946
CVE-2026-117945 (Incorrect boundary conditions in the XML component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117945
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117945
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117945
CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117944
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117944
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117944
CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117943
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117943
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117943
CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117942
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117942
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117942
CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This vulnerabil ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117941
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117941
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117941
CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117940
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117940
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117940
CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117939
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117939
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117939
CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117938
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117938
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117938
CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117937
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117937
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117937
CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117936
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117936
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117936
CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117935
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117935
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117935
CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117934
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117934
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117934
CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component. This vul ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117933
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117933
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117933
CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117932
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117932
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117932
CVE-2026-117931 (Use-after-free in the DOM: Events component. This vulnerability was fi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117931
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117931
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117931
CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117930
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117930
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117930
CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117929
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117929
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117929
CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117928
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117928
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117928
CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117927
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117927
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117927
CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117926
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117926
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117926
CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117925
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117925
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117925
CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117924
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117924
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117924
CVE-2026-117923 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117923
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117923
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117923
CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117922
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117922
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117922
CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117921
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117921
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117921
CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117920
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117920
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117920
CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117919
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117919
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117919
CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117918
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117918
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117918
CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This vulnerabili ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117917
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117917
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117917
CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117916
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117916
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117916
CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline componen ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117915
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117915
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117915
CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117914
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117914
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117914
CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117913
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117913
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117913
CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117912
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117912
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117912
CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117911
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117911
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117911
CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117910
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117910
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117910
CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117909
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117909
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117909
CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117908
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117908
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117908
CVE-2026-117907 (Use-after-free in the Networking component. This vulnerability was fix ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117907
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117907
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117907
CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117906
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117906
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117906
CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117905
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117905
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117905
CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117904
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117904
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117904
CVE-2026-117903 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117903
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117903
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117903
CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117902
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117902
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117902
CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117901
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117901
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117901
CVE-2026-117900 (Use-after-free in the DOM: Editor component. This vulnerability was fi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117900
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117900
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117900
CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117899
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117899
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117899
CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117898
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117898
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117898
CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117897
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117897
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117897
CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117896
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117896
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117896
CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117895
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117895
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117895
CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling component. This ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117894
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117894
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117894
CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component. This vul ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117893
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117893
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117893
CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC: Networking c ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117892
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117892
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117892
CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117891
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117891
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117891
CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117890
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117890
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117890
CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117889
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117889
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117889
CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component. This vulnera ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117888
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117888
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117888
CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117887
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117887
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117887
CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text component. This vu ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117886
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117886
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117886
CVE-2026-117885 (Use-after-free in the Layout: Grid component. This vulnerability was f ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117885
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117885
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117885
CVE-2026-117884 (Use-after-free in the Networking component. This vulnerability was fix ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117884
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117884
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117884
CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117883
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117883
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117883
CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117882
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117882
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117882
CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117881
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117881
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117881
CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117880
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117880
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117880
CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117879
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117879
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117879
CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB component. This ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117878
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117878
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117878
CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117877
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117877
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117877
CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117876
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117876
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117876
CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow component. This v ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117875
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117875
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117875
CVE-2026-117874 (Use-after-free in the Internationalization component. This vulnerabili ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117874
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117874
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117874
CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback component. ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117873
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117873
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117873
CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component. This vul ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117872
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117872
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117872
CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability was fixe ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117871
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117871
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117871
CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This vulnerability ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117870
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117870
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117870
CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117869
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117869
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117869
CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This vulnerability wa ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117868
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117868
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117868
CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117867
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117867
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117867
CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics: Canvas2D c ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117866
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117866
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117866
CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117865
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117865
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117865
CVE-2026-117864 (Sandbox escape in the Form Manager component. This vulnerability was f ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117864
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117864
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117864
CVE-2026-117863 (Information disclosure due to uninitialized memory in the Audio/Video ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117863
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117863
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117863
CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in the Netwo ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117862
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117862
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117862
CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This vulnerability wa ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117861
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117861
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117861
CVE-2026-117860 (Same-origin policy bypass in the DOM: Navigation component. This vulne ...)
- firefox <unfixed>
- firefox-esr <unfixed>
+ - thunderbird <unfixed>
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117860
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117860
+ NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117860
CVE-2026-117604 (Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in ...)
TODO: check
CVE-2026-117603 (Electrum before 4.7.2 contains a spending limit bypass vulnerability i ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/51c42628321ea8d51e13500623d1508e74737d47
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/51c42628321ea8d51e13500623d1508e74737d47
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/06de8b30/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list