CVE-2026-117887 Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

CVE-2026-117883

A use-after-free vulnerability exists in the DOM: HTML Parser component of the Firefox web browser. This flaw has been addressed in Firefox 159 , Firefox ESR 115.44 , and Firefox ESR 153.6 . No specific exploit details or in-the-wild exploitation information are provided in the documents.

CVE-2026-117883 Use-after-free in the DOM: HTML Parser component

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

CVE-2026-117881 Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

CVE-2026-117881

A Use-after-free vulnerability exists in the DOM: Core & HTML component of the Firefox web browser. This flaw was addressed in Firefox 159 , Firefox ESR 115.44 , and Firefox ESR 153.6 . No specific exploit information or practical impact details are provided in the documents.

EUVD-2026-111052

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

EUVD-2026-111054

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

CVE-2026-117869

Firefox is affected by a use-after-free vulnerability in the DOM: Core & HTML component . This flaw was addressed in the release of Firefox 159 , Firefox ESR 115.44 , and Firefox ESR 153.6 . No specific exploit information or direct impact details are provided in the documentation.

CVE-2026-117869 Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

EUVD-2026-111040

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

EUVD-2026-110803

REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the function parameter is concatenated into an error message rendered without HTML escaping. Attackers can lure an authenticated backend user to a crafted link containing a valid CSRF...

CVE-2026-116803

DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an INPLACE hook removes a parent or sibling node. Attacker markup in detached subtrees is never walked or neutralized, so handlers like img onerror fire after sanitize...

DEBIAN-CVE-2026-116803

DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an INPLACE hook removes a parent or sibling node. Attacker markup in detached subtrees is never walked or neutralized, so handlers like img onerror fire after sanitize...

UBUNTU-CVE-2026-116803

DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an INPLACE hook removes a parent or sibling node. Attacker markup in detached subtrees is never walked or neutralized, so handlers like img onerror fire after sanitize...

CVE-2026-116803

DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed when an INPLACE hook removes a parent or sibling node. Attacker markup in detached subtrees is never walked or neutralized, so handlers like img onerror fire after sanitize...

PT-2026-126597

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159...

PT-2026-126601

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox and Thunderbird; it stems from a use-after-free issue in the DOM: Core & HTML component...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159 and Mozilla Thunderbird versions prior to 159. This vulnerability stems from a race condition and use-after-free issue in the DOM: File component...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a use-after-free issue in the DOM: Core &...