[Git][security-tracker-team/security-tracker][master] Track fixed version for firefox via unstable upload
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Oct 29 05:13:21 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
31b3b983 by Salvatore Bonaccorso at 2026-10-29T06:13:04+01:00
Track fixed version for firefox via unstable upload
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2397,1074 +2397,1074 @@ CVE-2026-118131 (GnuPG (version 2.5.21) for Windows contains a vulnerability whe
CVE-2026-118027 (Frame poisoning in the Layout component. This vulnerability was fixed ...)
TODO: check
CVE-2026-118026 (Invalid pointer in the JavaScript: GC component. This vulnerability wa ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118026
CVE-2026-118025 (Other issue in the SVG component. This vulnerability was fixed in Fire ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118025
CVE-2026-118024 (Use-after-free in the Graphics: Text component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118024
CVE-2026-118023 (Sandbox escape due to use-after-free in the Graphics: WebRender compon ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118023
CVE-2026-118022 (Sandbox escape due to use-after-free in the Disability Access APIs com ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118022
CVE-2026-118021 (Sandbox escape due to use-after-free in the XPCOM component. This vuln ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118021
CVE-2026-118020 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118020
CVE-2026-118019 (Race condition, use-after-free in the DOM: File component. This vulner ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118019
CVE-2026-118018 (Spoofing issue in the Downloads component in Firefox for Android. This ...)
- firefox <not-affected> (Only affects Firefox on Android)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118018
CVE-2026-118017 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118017
CVE-2026-118016 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118016
CVE-2026-118015 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118015
CVE-2026-118014 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118014
CVE-2026-118013 (Use-after-free in the Layout: Images, Video, and HTML Frames component ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118013
CVE-2026-118012 (Use-after-free in the DOM: Animation component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118012
CVE-2026-118011 (Frame poisoning in the CSS Parsing and Computation component. This vul ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118011
CVE-2026-118010 (Use-after-free in the Disability Access APIs component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118010
CVE-2026-118009 (Integer overflow, use-after-free in the Graphics: Text component. This ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118009
CVE-2026-118008 (Privilege escalation in the DOM: Navigation component. This vulnerabil ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118008
CVE-2026-118007 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118007
CVE-2026-118006 (Privilege escalation due to use-after-free in the WebRTC: Signaling co ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118006
CVE-2026-118005 (Use-after-free in the WebRTC: Signaling component. This vulnerability ...)
- - firefox <unfixed>
+ - firefox 159.0-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118005
CVE-2026-118004 (Incorrect boundary conditions in the CSS Transitions and Animations co ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118004
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118004
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118004
CVE-2026-118003 (Information disclosure in the Networking: DNS component. This vulnerab ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118003
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118003
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118003
CVE-2026-118002 (Information disclosure due to race condition in the Networking compone ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118002
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118002
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118002
CVE-2026-118000 (Information disclosure in the Networking: HTTP component. This vulnera ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-118000
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-118000
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-118000
CVE-2026-117999 (Race condition in the IPC component. This vulnerability was fixed in F ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117999
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117999
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117999
CVE-2026-117998 (Mitigation bypass in the DOM: Push Subscriptions component. This vulne ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117998
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117998
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117998
CVE-2026-117997 (Sandbox escape due to use-after-free in the Widget component. This vul ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117997
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117997
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117997
CVE-2026-117996 (Incorrect boundary conditions in the WebRTC component. This vulnerabil ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117996
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117996
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117996
CVE-2026-117995 (Privilege escalation in the DOM: UI Events & Focus Handling component. ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117995
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117995
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117995
CVE-2026-117994 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117994
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117994
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117994
CVE-2026-117993 (Integer overflow in the Graphics: Text component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117993
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117993
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117993
CVE-2026-117992 (Information disclosure in the CSS Parsing and Computation component. T ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117992
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117992
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117992
CVE-2026-117991 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117991
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117991
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117991
CVE-2026-117990 (Sandbox escape due to incorrect boundary conditions in the Graphics: W ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117990
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117990
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117990
CVE-2026-117989 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117989
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117989
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117989
CVE-2026-117988 (Sandbox escape due to incorrect boundary conditions in the Graphics: C ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117988
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117988
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117988
CVE-2026-117987 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117987
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117987
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117987
CVE-2026-117986 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117986
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117986
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117986
CVE-2026-117985 (Sandbox escape due to use-after-free in the Graphics component. This v ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117985
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117985
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117985
CVE-2026-117984 (Incorrect boundary conditions in the Layout: Scrolling and Overflow co ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117984
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117984
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117984
CVE-2026-117983 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117983
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117983
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117983
CVE-2026-117982 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117982
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117982
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117982
CVE-2026-117981 (Privilege escalation in the Toolkit component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117981
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117981
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117981
CVE-2026-117980 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117980
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117980
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117980
CVE-2026-117979 (Incorrect boundary conditions in the Graphics: WebRender component. Th ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117979
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117979
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117979
CVE-2026-117978 (Incorrect boundary conditions in the Graphics component. This vulnerab ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117978
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117978
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117978
CVE-2026-117977 (Other issue in the Console component. This vulnerability was fixed in ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117977
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117977
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117977
CVE-2026-117976 (Site isolation issue in the DOM: Navigation component. This vulnerabil ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117976
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117976
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117976
CVE-2026-117975 (Sandbox escape due to invalid pointer in the Graphics: WebRender compo ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117975
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117975
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117975
CVE-2026-117974 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117974
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117974
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117974
CVE-2026-117973 (Use-after-free in the Networking: DNS component. This vulnerability wa ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117973
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117973
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117973
CVE-2026-117972 (Use-after-free in the Graphics component. This vulnerability was fixed ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117972
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117972
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117972
CVE-2026-117971 (Sandbox escape due to use-after-free in the Print Preview component. T ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117971
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117971
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117971
CVE-2026-117970 (Race condition in the Disability Access APIs component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117970
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117970
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117970
CVE-2026-117969 (Invalid pointer in the JavaScript Engine: JIT component. This vulnerab ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117969
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117969
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117969
CVE-2026-117968 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117968
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117968
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117968
CVE-2026-117967 (Mitigation bypass in the DOM: Security component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117967
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117967
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117967
CVE-2026-117966 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117966
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117966
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117966
CVE-2026-117965 (Same-origin policy bypass in the Address Bar component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117965
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117965
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117965
CVE-2026-117964 (Use-after-free in the Panning and Zooming component. This vulnerabilit ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117964
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117964
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117964
CVE-2026-117963 (Incorrect boundary conditions in the DOM: Service Workers component. T ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117963
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117963
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117963
CVE-2026-117962 (Sandbox escape due to incorrect boundary conditions in the Storage: Qu ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117962
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117962
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117962
CVE-2026-117961 (Incorrect boundary conditions in the Layout: Text and Fonts component. ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117961
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117961
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117961
CVE-2026-117960 (Spoofing issue in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117960
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117960
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117960
CVE-2026-117959 (Site isolation issue in the DOM: Service Workers component. This vulne ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117959
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117959
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117959
CVE-2026-117958 (Site isolation issue in the Networking: HTTP component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117958
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117958
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117958
CVE-2026-117957 (Cryptographic issue in the WebRTC: Networking component. This vulnerab ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117957
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117957
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117957
CVE-2026-117956 (Invalid pointer in the Nimbus Desktop Client component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117956
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117956
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117956
CVE-2026-117955 (JIT miscompilation in the JavaScript: WebAssembly component. This vuln ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117955
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117955
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117955
CVE-2026-117954 (Use-after-free in the Layout: Positioned component. This vulnerability ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117954
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117954
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117954
CVE-2026-117953 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117953
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117953
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117953
CVE-2026-117952 (Uninitialized memory in the Networking component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117952
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117952
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117952
CVE-2026-117951 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117951
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117951
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117951
CVE-2026-117950 (Incorrect boundary conditions in the DOM: Core & HTML component. This ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117950
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117950
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117950
CVE-2026-117949 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117949
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117949
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117949
CVE-2026-117948 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117948
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117948
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117948
CVE-2026-117947 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117947
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117947
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117947
CVE-2026-117946 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117946
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117946
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117946
CVE-2026-117945 (Incorrect boundary conditions in the XML component. This vulnerability ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117945
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117945
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117945
CVE-2026-117944 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117944
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117944
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117944
CVE-2026-117943 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117943
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117943
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117943
CVE-2026-117942 (Incorrect boundary conditions in the JavaScript Engine: JIT component. ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117942
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117942
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117942
CVE-2026-117941 (Use-after-free in the DOM: CSS Object Model component. This vulnerabil ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117941
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117941
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117941
CVE-2026-117940 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117940
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117940
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117940
CVE-2026-117939 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117939
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117939
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117939
CVE-2026-117938 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117938
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117938
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117938
CVE-2026-117937 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117937
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117937
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117937
CVE-2026-117936 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117936
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117936
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117936
CVE-2026-117935 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117935
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117935
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117935
CVE-2026-117934 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117934
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117934
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117934
CVE-2026-117933 (Frame poisoning in the CSS Parsing and Computation component. This vul ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117933
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117933
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117933
CVE-2026-117932 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117932
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117932
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117932
CVE-2026-117931 (Use-after-free in the DOM: Events component. This vulnerability was fi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117931
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117931
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117931
CVE-2026-117930 (Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117930
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117930
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117930
CVE-2026-117929 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117929
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117929
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117929
CVE-2026-117928 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117928
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117928
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117928
CVE-2026-117927 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117927
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117927
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117927
CVE-2026-117926 (Incorrect boundary conditions in the SVG component. This vulnerability ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117926
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117926
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117926
CVE-2026-117925 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117925
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117925
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117925
CVE-2026-117924 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117924
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117924
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117924
CVE-2026-117923 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117923
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117923
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117923
CVE-2026-117922 (Use-after-free in the Networking: WebSockets component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117922
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117922
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117922
CVE-2026-117921 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117921
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117921
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117921
CVE-2026-117920 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117920
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117920
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117920
CVE-2026-117919 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117919
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117919
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117919
CVE-2026-117918 (Use-after-free in the Graphics: Canvas2D component. This vulnerability ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117918
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117918
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117918
CVE-2026-117917 (Invalid pointer in the Graphics: WebRender component. This vulnerabili ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117917
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117917
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117917
CVE-2026-117916 (Use-after-free in the XSLT component. This vulnerability was fixed in ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117916
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117916
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117916
CVE-2026-117915 (Incorrect boundary conditions in the Layout: Block and Inline componen ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117915
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117915
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117915
CVE-2026-117914 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117914
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117914
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117914
CVE-2026-117913 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117913
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117913
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117913
CVE-2026-117912 (Same-origin policy bypass in the CSS Parsing and Computation component ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117912
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117912
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117912
CVE-2026-117911 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117911
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117911
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117911
CVE-2026-117910 (Invalid pointer in the JavaScript Engine component. This vulnerability ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117910
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117910
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117910
CVE-2026-117909 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117909
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117909
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117909
CVE-2026-117908 (Use-after-free in the Graphics: ImageLib component. This vulnerability ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117908
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117908
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117908
CVE-2026-117907 (Use-after-free in the Networking component. This vulnerability was fix ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117907
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117907
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117907
CVE-2026-117906 (Use-after-free in the CSS Parsing and Computation component. This vuln ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117906
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117906
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117906
CVE-2026-117905 (Use-after-free in the Audio/Video: Playback component. This vulnerabil ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117905
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117905
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117905
CVE-2026-117904 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117904
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117904
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117904
CVE-2026-117903 (Use-after-free in the Audio/Video component. This vulnerability was fi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117903
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117903
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117903
CVE-2026-117902 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117902
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117902
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117902
CVE-2026-117901 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117901
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117901
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117901
CVE-2026-117900 (Use-after-free in the DOM: Editor component. This vulnerability was fi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117900
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117900
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117900
CVE-2026-117899 (Use-after-free in the Networking: HTTP component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117899
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117899
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117899
CVE-2026-117898 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117898
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117898
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117898
CVE-2026-117897 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117897
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117897
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117897
CVE-2026-117896 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117896
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117896
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117896
CVE-2026-117895 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117895
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117895
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117895
CVE-2026-117894 (Incorrect boundary conditions in the WebRTC: Signaling component. This ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117894
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117894
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117894
CVE-2026-117893 (Incorrect boundary conditions in the Security: PSM component. This vul ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117893
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117893
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117893
CVE-2026-117892 (Privilege escalation due to use-after-free in the WebRTC: Networking c ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117892
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117892
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117892
CVE-2026-117891 (Use-after-free in the JavaScript Engine: JIT component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117891
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117891
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117891
CVE-2026-117890 (JIT miscompilation in the JavaScript Engine: JIT component. This vulne ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117890
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117890
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117890
CVE-2026-117889 (Incorrect boundary conditions in the JavaScript Engine component. This ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117889
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117889
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117889
CVE-2026-117888 (Uninitialized memory in the Graphics: Canvas2D component. This vulnera ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117888
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117888
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117888
CVE-2026-117887 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117887
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117887
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117887
CVE-2026-117886 (Incorrect boundary conditions in the Graphics: Text component. This vu ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117886
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117886
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117886
CVE-2026-117885 (Use-after-free in the Layout: Grid component. This vulnerability was f ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117885
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117885
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117885
CVE-2026-117884 (Use-after-free in the Networking component. This vulnerability was fix ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117884
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117884
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117884
CVE-2026-117883 (Use-after-free in the DOM: HTML Parser component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117883
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117883
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117883
CVE-2026-117882 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117882
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117882
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117882
CVE-2026-117881 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117881
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117881
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117881
CVE-2026-117880 (Use-after-free in the XML component. This vulnerability was fixed in F ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117880
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117880
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117880
CVE-2026-117879 (Incorrect boundary conditions in the Layout: Tables component. This vu ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117879
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117879
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117879
CVE-2026-117878 (Other issue, use-after-free in the Storage: IndexedDB component. This ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117878
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117878
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117878
CVE-2026-117877 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117877
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117877
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117877
CVE-2026-117876 (Use-after-free in the Layout: Text and Fonts component. This vulnerabi ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117876
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117876
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117876
CVE-2026-117875 (Use-after-free in the Layout: Scrolling and Overflow component. This v ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117875
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117875
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117875
CVE-2026-117874 (Use-after-free in the Internationalization component. This vulnerabili ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117874
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117874
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117874
CVE-2026-117873 (Incorrect boundary conditions in the Audio/Video: Playback component. ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117873
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117873
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117873
CVE-2026-117872 (Use-after-free in the JavaScript: Standard Library component. This vul ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117872
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117872
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117872
CVE-2026-117871 (Invalid pointer in the Graphics component. This vulnerability was fixe ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117871
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117871
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117871
CVE-2026-117870 (Use-after-free in the JavaScript Engine component. This vulnerability ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117870
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117870
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117870
CVE-2026-117869 (Use-after-free in the DOM: Core & HTML component. This vulnerability w ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117869
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117869
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117869
CVE-2026-117868 (Sandbox escape in the DOM: Networking component. This vulnerability wa ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117868
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117868
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117868
CVE-2026-117867 (Use-after-free in the Layout component. This vulnerability was fixed i ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117867
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117867
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117867
CVE-2026-117866 (Privilege escalation due to use-after-free in the Graphics: Canvas2D c ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117866
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117866
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117866
CVE-2026-117865 (Use-after-free in the JavaScript: GC component. This vulnerability was ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117865
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117865
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117865
CVE-2026-117864 (Sandbox escape in the Form Manager component. This vulnerability was f ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117864
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117864
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117864
CVE-2026-117863 (Information disclosure due to uninitialized memory in the Audio/Video ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117863
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117863
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117863
CVE-2026-117862 (Privilege escalation due to incorrect boundary conditions in the Netwo ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117862
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117862
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117862
CVE-2026-117861 (Sandbox escape in the DOM: Navigation component. This vulnerability wa ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117861
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-120/#CVE-2026-117861
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-122/#CVE-2026-117861
CVE-2026-117860 (Same-origin policy bypass in the DOM: Navigation component. This vulne ...)
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/#CVE-2026-117860
@@ -45493,7 +45493,7 @@ CVE-2026-100800 (Sandbox escape due to use-after-free in the Disability Access A
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100800
CVE-2026-100801 (Privilege escalation in the DLL Services component. This vulnerability ...)
{DSA-6536-1 DSA-6533-1 DLA-4814-1 DLA-4810-1}
- - firefox <unfixed>
+ - firefox 159.0-1
- firefox-esr 153.6.0esr-1
- thunderbird 1:153.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100801
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/31b3b983b1a39a4cf9728f39137c5f1ed73ffffd
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/31b3b983b1a39a4cf9728f39137c5f1ed73ffffd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/04679c86/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list