CVE-2026-118026
Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Baza CVE
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
CVE-2026-118027
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,1
- EPSS
- 0,13 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-12887
In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes outside of the parent directory.
PozostałeOpis źródłowy · EN
- CVSS
- 5,1
- EPSS
- 0,24 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-16307
Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7.
PozostałeOpis źródłowy · EN
- CVSS
- 4,3
- EPSS
- 0,19 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118012
Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118013
Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118014
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118015
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118016
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118017
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118018
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,13 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118019
Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118020
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118021
Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118022
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118003
Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,1
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118004
Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,1
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118005
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118006
Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118007
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118008
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,35 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118009
Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118010
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118011
Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117991
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-118026 Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118027 Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44. |
Wysoki priorytet |
CVSS 9,1EPSS 0,13 % | ||
| CVE-2026-12887 In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes outside of the parent directory. |
Pozostałe |
CVSS 5,1EPSS 0,24 % | ||
| CVE-2026-16307 Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue… |
Pozostałe |
CVSS 4,3EPSS 0,19 % | ||
| CVE-2026-118012 Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118013 Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118014 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118015 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118016 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118017 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118018 Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159. |
Monitoruj |
CVSS 8,8EPSS 0,13 % | ||
| CVE-2026-118019 Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118020 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118021 Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118022 Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,14 % | ||
| CVE-2026-118003 Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,1EPSS 0,18 % | ||
| CVE-2026-118004 Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,1EPSS 0,18 % | ||
| CVE-2026-118005 Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118006 Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118007 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118008 Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,35 % | ||
| CVE-2026-118009 Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118010 Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118011 Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-117991 Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 6.11.2026, 03:02 UTC – 6.11.2026, 08:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.