CVE-2026-118021

Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159...

CVE-2026-118022

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159...

CVE-2026-118023

Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159...

CVE-2026-118019

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159...

CVE-2026-118020

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159...

CVE-2026-118016

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159...

CVE-2026-118018

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159...

CVE-2026-118017

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159...

CVE-2026-118013

Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159...

CVE-2026-118014

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159...

CVE-2026-118015

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159...

CVE-2026-118010

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159...

CVE-2026-118011

Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159...

CVE-2026-118012

Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159...

CVE-2026-118007

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159...

CVE-2026-118009

Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159...

CVE-2026-118008

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159...

CVE-2026-118005

Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159...

CVE-2026-118006

Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159...

CVE-2026-118004

Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6...