CVE-2026-118016
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Publikacje w kolejności czasu
Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
CVE-2026-118017
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118018
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,13 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118019
Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118020
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118021
Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118022
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118003
Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,1
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118004
Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,1
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118005
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118006
Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118007
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118008
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,35 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118009
Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118010
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118011
Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117991
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117992
Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
PozostałeOpis źródłowy · EN
- CVSS
- 6,5
- EPSS
- 0,19 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117993
Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117994
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117995
Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117996
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,1
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117997
Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,6
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117998
Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,19 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117999
Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-118016 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118017 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118018 Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159. |
Monitoruj |
CVSS 8,8EPSS 0,13 % | ||
| CVE-2026-118019 Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118020 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118021 Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118022 Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118003 Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,1EPSS 0,18 % | ||
| CVE-2026-118004 Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,1EPSS 0,18 % | ||
| CVE-2026-118005 Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118006 Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118007 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118008 Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,35 % | ||
| CVE-2026-118009 Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118010 Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118011 Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-117991 Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117992 Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird… |
Pozostałe |
CVSS 6,5EPSS 0,19 % | ||
| CVE-2026-117993 Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117994 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117995 Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117996 Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,1EPSS 0,18 % | ||
| CVE-2026-117997 Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Wysoki priorytet |
CVSS 9,6EPSS 0,18 % | ||
| CVE-2026-117998 Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,19 % | ||
| CVE-2026-117999 Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 8.11.2026, 07:32 UTC – 8.11.2026, 09:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.