Archive · Firefox
Release — Firefox · 2026-10-27
CVEs 166
| CVE | Component | Class | Severity | ITW | Fix | RCA |
|---|---|---|---|---|---|---|
| CVE-2026-117860 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117861 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117862 | Networking | Logic Error | High | — | ● | — |
| CVE-2026-117863 | Core | Logic Error | High | — | — | — |
| CVE-2026-117864 | Toolkit | Logic Error | High | — | ● | — |
| CVE-2026-117865 | SpiderMonkey | UAF | High | — | ● | ✓ |
| CVE-2026-117866 | Graphics | Logic Error | High | — | ● | — |
| CVE-2026-117867 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117868 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117869 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117870 | SpiderMonkey | UAF | High | — | ● | ✓ |
| CVE-2026-117871 | Graphics | OOB | High | — | ● | ✓ |
| CVE-2026-117872 | SpiderMonkey | UAF | High | — | ● | ✓ |
| CVE-2026-117873 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117874 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117875 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117876 | Graphics | Logic Error | High | — | ● | — |
| CVE-2026-117877 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117878 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117879 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117880 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117881 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117882 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117883 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117884 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117885 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117886 | Graphics | Logic Error | High | — | ● | — |
| CVE-2026-117887 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117888 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117889 | SpiderMonkey | OOB | High | — | ● | ✓ |
| CVE-2026-117890 | SpiderMonkey | Logic Error | High | — | ● | — |
| CVE-2026-117891 | SpiderMonkey | Logic Error | High | — | ● | — |
| CVE-2026-117892 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117893 | Security/NSS | Logic Error | High | — | ● | — |
| CVE-2026-117894 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117895 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117896 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117897 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117898 | SpiderMonkey | Logic Error | High | — | ● | — |
| CVE-2026-117899 | Networking | Logic Error | High | — | ● | — |
| CVE-2026-117900 | Core | Logic Error | High | — | ● | — |
| CVE-2026-117901 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117902 | Graphics | Logic Error | High | — | ● | — |
| CVE-2026-117903 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117904 | Core | Logic Error | High | — | ● | — |
| CVE-2026-117905 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117906 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117907 | Networking | Logic Error | High | — | ● | — |
| CVE-2026-117908 | ImageLib | Logic Error | High | — | ● | — |
| CVE-2026-117909 | SpiderMonkey | UAF | High | — | ● | ✓ |
| CVE-2026-117910 | SpiderMonkey | UAF | High | — | ● | ✓ |
| CVE-2026-117911 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117912 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117913 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117914 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117915 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117916 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117917 | Graphics | UAF | High | — | ● | ✓ |
| CVE-2026-117918 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117919 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117920 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117921 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117922 | Networking | Logic Error | High | — | ● | — |
| CVE-2026-117923 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117924 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117925 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117926 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117927 | ImageLib | Logic Error | High | — | ● | — |
| CVE-2026-117928 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117929 | DOM | UAF | High | — | ● | ✓ |
| CVE-2026-117930 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117931 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117932 | Core | Logic Error | High | — | — | — |
| CVE-2026-117933 | Core | Logic Error | High | — | — | — |
| CVE-2026-117934 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117935 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117936 | DOM | UAF | High | — | ● | ✓ |
| CVE-2026-117937 | SpiderMonkey | Uninitialized Memory | High | — | ● | ✓ |
| CVE-2026-117938 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117939 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117940 | Core | Logic Error | High | — | — | — |
| CVE-2026-117941 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117942 | SpiderMonkey | Logic Error | High | — | ● | — |
| CVE-2026-117943 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117944 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117945 | Core | Logic Error | High | — | — | — |
| CVE-2026-117946 | SpiderMonkey | Logic Error | High | — | ● | — |
| CVE-2026-117947 | Core | Logic Error | High | — | — | — |
| CVE-2026-117948 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117949 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117950 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117951 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-117952 | Networking | Logic Error | High | — | ● | — |
| CVE-2026-117953 | Core | Logic Error | High | — | — | — |
| CVE-2026-117954 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-117955 | Core | Logic Error | Moderate | — | — | — |
| CVE-2026-117956 | DOM | Logic Error | Moderate | — | ● | — |
| CVE-2026-117957 | DOM | Logic Error | Moderate | — | ● | — |
| CVE-2026-117958 | Networking | Logic Error | Moderate | — | ● | — |
| CVE-2026-117959 | DOM | Logic Error | Moderate | — | ● | — |
| CVE-2026-117960 | Core | Spoofing | Moderate | — | ● | ✓ |
| CVE-2026-117961 | Layout | OOB | Moderate | — | ● | ✓ |
| CVE-2026-117962 | DOM | Race | Moderate | — | ● | ✓ |
| CVE-2026-117963 | DOM | Race | Moderate | — | ● | ✓ |
| CVE-2026-117964 | Layout | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117965 | Core | Cross Origin | Moderate | — | ● | ✓ |
| CVE-2026-117966 | Networking | Logic Error | Moderate | — | ● | — |
| CVE-2026-117967 | DOM | Policy Bypass | Moderate | — | ● | ✓ |
| CVE-2026-117968 | DOM | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117969 | SpiderMonkey | Type Confusion | Moderate | — | ● | ✓ |
| CVE-2026-117970 | Core | Race | Moderate | — | ● | ✓ |
| CVE-2026-117971 | Core | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117972 | Graphics | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117973 | Networking | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117974 | DOM | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117975 | Graphics | Logic Error | Moderate | — | ● | ✓ |
| CVE-2026-117976 | Core | Authorization Error | Moderate | — | ● | ✓ |
| CVE-2026-117977 | Core | Input Validation | Moderate | — | ● | ✓ |
| CVE-2026-117978 | Graphics | Type Confusion | Moderate | — | ● | ✓ |
| CVE-2026-117979 | Graphics | OOB | Moderate | — | ● | ✓ |
| CVE-2026-117980 | Graphics | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117981 | Toolkit | Input Validation | Moderate | — | ● | ✓ |
| CVE-2026-117982 | SpiderMonkey | Logic Error | Moderate | — | ● | ✓ |
| CVE-2026-117983 | Graphics | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117984 | Layout | Type Confusion | Moderate | — | ● | ✓ |
| CVE-2026-117985 | Graphics | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117986 | Graphics | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117987 | Graphics | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117988 | DOM | Input Validation | Moderate | — | ● | ✓ |
| CVE-2026-117989 | Graphics | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117990 | Graphics | OOB | Moderate | — | ● | ✓ |
| CVE-2026-117991 | Layout | Logic Error | Moderate | — | ● | ✓ |
| CVE-2026-117992 | DOM | Policy Bypass | Moderate | — | ● | ✓ |
| CVE-2026-117993 | Graphics | Integer Overflow | Moderate | — | ● | ✓ |
| CVE-2026-117994 | SpiderMonkey | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117995 | DOM | Input Validation | Moderate | — | ● | ✓ |
| CVE-2026-117996 | Core | Logic Error | Moderate | — | ● | — |
| CVE-2026-117997 | Graphics | UAF | Moderate | — | ● | ✓ |
| CVE-2026-117998 | Core | Logic Error | Low | — | ● | — |
| CVE-2026-117999 | Core | Race | Low | — | ● | ✓ |
| CVE-2026-118000 | Networking | Policy Bypass | Low | — | ● | ✓ |
| CVE-2026-118002 | Networking | Race | Low | — | ● | ✓ |
| CVE-2026-118003 | Networking | Policy Bypass | Low | — | ● | ✓ |
| CVE-2026-118004 | Layout | Logic Error | Low | — | ● | — |
| CVE-2026-118005 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-118006 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-118007 | SpiderMonkey | Logic Error | High | — | ● | — |
| CVE-2026-118008 | Toolkit | Logic Error | High | — | ● | — |
| CVE-2026-118009 | Core | Logic Error | High | — | ● | — |
| CVE-2026-118010 | Core | Logic Error | High | — | ● | — |
| CVE-2026-118011 | Core | Logic Error | High | — | ● | — |
| CVE-2026-118012 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-118013 | Layout | Logic Error | High | — | ● | — |
| CVE-2026-118014 | SpiderMonkey | Logic Error | High | — | ● | — |
| CVE-2026-118015 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-118016 | DOM | Logic Error | High | — | ● | — |
| CVE-2026-118017 | Core | Logic Error | High | — | — | — |
| CVE-2026-118018 | Core | Logic Error | Moderate | — | ● | — |
| CVE-2026-118019 | DOM | Logic Error | Moderate | — | ● | — |
| CVE-2026-118020 | Layout | UAF | Moderate | — | ● | ✓ |
| CVE-2026-118021 | Core | UAF | Moderate | — | ● | ✓ |
| CVE-2026-118022 | Core | Logic Error | Moderate | — | ● | — |
| CVE-2026-118023 | Graphics | Type Confusion | Moderate | — | ● | ✓ |
| CVE-2026-118024 | Graphics | UAF | Moderate | — | ● | ✓ |
| CVE-2026-118025 | DOM | Logic Error | Moderate | — | ● | ✓ |
| CVE-2026-118026 | SpiderMonkey | Logic Error | Low | — | ● | ✓ |