CVE-2026-118009
Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Baza CVE
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
CVE-2026-118010
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118011
Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117991
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117992
Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
PozostałeOpis źródłowy · EN
- CVSS
- 6,5
- EPSS
- 0,19 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117993
Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117994
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117995
Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117996
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,1
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117997
Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,6
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117998
Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,19 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117999
Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118000
Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,1
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-118002
Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,1
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117981
Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117982
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117983
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117984
Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117985
Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,6
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117986
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117987
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117988
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,6
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117989
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117990
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,6
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117971
Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,6
- EPSS
- 0,19 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-118009 Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118010 Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-118011 Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
Monitoruj |
CVSS 8,8EPSS 0,15 % | ||
| CVE-2026-117991 Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117992 Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird… |
Pozostałe |
CVSS 6,5EPSS 0,19 % | ||
| CVE-2026-117993 Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117994 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117995 Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117996 Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,1EPSS 0,18 % | ||
| CVE-2026-117997 Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Wysoki priorytet |
CVSS 9,6EPSS 0,18 % | ||
| CVE-2026-117998 Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,19 % | ||
| CVE-2026-117999 Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-118000 Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,1EPSS 0,18 % | ||
| CVE-2026-118002 Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,1EPSS 0,18 % | ||
| CVE-2026-117981 Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Wysoki priorytet |
CVSS 9,8EPSS 0,18 % | ||
| CVE-2026-117982 Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Wysoki priorytet |
CVSS 9,8EPSS 0,18 % | ||
| CVE-2026-117983 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117984 Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117985 Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Wysoki priorytet |
CVSS 9,6EPSS 0,18 % | ||
| CVE-2026-117986 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117987 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117988 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird… |
Wysoki priorytet |
CVSS 9,6EPSS 0,18 % | ||
| CVE-2026-117989 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
Monitoruj |
CVSS 8,8EPSS 0,18 % | ||
| CVE-2026-117990 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird… |
Wysoki priorytet |
CVSS 9,6EPSS 0,18 % | ||
| CVE-2026-117971 Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird… |
Wysoki priorytet |
CVSS 9,6EPSS 0,19 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 6.11.2026, 11:02 UTC – 6.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.