Mozilla
Security Vulnerabilities fixed in Firefox 159
MFSA2026-118 Oct 27, 2026 Source: Vendor
Imported from Mozilla security advisory MFSA2026-118. Draft.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
167 lines
Showing 101–150 of 167 , page 3 of 4
CVE-2026-117948
BR2026-0000-037725
unclaimed
High: Use-after-free in the SVG component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117949
BR2026-0000-037726
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117950
BR2026-0000-037727
unclaimed
High: Incorrect boundary conditions in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117951
BR2026-0000-037728
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117952
BR2026-0000-037729
unclaimed
High: Uninitialized memory in the Networking component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117953
BR2026-0000-037730
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-118017
BR2026-0000-037731
unclaimed
High: Use-after-free in the SVG component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117954
BR2026-0000-037732
unclaimed
High: Use-after-free in the Layout: Positioned component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-118018
BR2026-0000-037733
unclaimed
Moderate: Spoofing issue in the Downloads component in Firefox for Android
Credited as haxatron1
CVE-2026-118019
BR2026-0000-037734
unclaimed
Moderate: Race condition, use-after-free in the DOM: File component
Credited as Mozilla
CVE-2026-117955
BR2026-0000-037735
unclaimed
Moderate: JIT miscompilation in the JavaScript: WebAssembly component
Credited as Mozilla
CVE-2026-100801
BR2026-0000-037736
unclaimed
Moderate: Privilege escalation in the DLL Services component
Credited as Mozilla
CVE-2026-117956
BR2026-0000-037737
unclaimed
Moderate: Invalid pointer in the Nimbus Desktop Client component
Credited as Mozilla
CVE-2026-117957
BR2026-0000-037738
unclaimed
Moderate: Cryptographic issue in the WebRTC: Networking component
Credited as Mozilla
CVE-2026-117958
BR2026-0000-037739
unclaimed
Moderate: Site isolation issue in the Networking: HTTP component
Credited as Mozilla
CVE-2026-117959
BR2026-0000-037740
unclaimed
Moderate: Site isolation issue in the DOM: Service Workers component
Credited as Muhammad Ali
CVE-2026-117960
BR2026-0000-037741
unclaimed
Moderate: Spoofing issue in the DOM: Core & HTML component
Credited as Mohamed Mbarek
CVE-2026-117961
BR2026-0000-037742
unclaimed
Moderate: Incorrect boundary conditions in the Layout: Text and Fonts component
Credited as Mozilla
CVE-2026-117962
BR2026-0000-037743
unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component
Credited as Mozilla
CVE-2026-117963
BR2026-0000-037744
unclaimed
Moderate: Incorrect boundary conditions in the DOM: Service Workers component
Credited as Mozilla
CVE-2026-117964
BR2026-0000-037745
unclaimed
Moderate: Use-after-free in the Panning and Zooming component
Credited as Mozilla
CVE-2026-117965
BR2026-0000-037746
unclaimed
Moderate: Same-origin policy bypass in the Address Bar component
Credited as Takashi Suzuki
CVE-2026-117966
BR2026-0000-037747
unclaimed
Moderate: Site isolation issue in the Networking: HTTP component
Credited as Mozilla
CVE-2026-117967
BR2026-0000-037748
unclaimed
Moderate: Mitigation bypass in the DOM: Security component
Credited as Nguyen Tuan Hung
CVE-2026-118020
BR2026-0000-037749
unclaimed
Moderate: Use-after-free in the Layout component
Credited as Mozilla
CVE-2026-117968
BR2026-0000-037750
unclaimed
Moderate: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-117969
BR2026-0000-037751
unclaimed
Moderate: Invalid pointer in the JavaScript Engine: JIT component
Credited as Mozilla
CVE-2026-117970
BR2026-0000-037752
unclaimed
Moderate: Race condition in the Disability Access APIs component
Credited as Nguyen Thanh Nguyen
CVE-2026-117971
BR2026-0000-037753
unclaimed
Moderate: Sandbox escape due to use-after-free in the Print Preview component
Credited as Mozilla
CVE-2026-117972
BR2026-0000-037754
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-118021
BR2026-0000-037755
unclaimed
Moderate: Sandbox escape due to use-after-free in the XPCOM component
Credited as Mozilla
CVE-2026-117973
BR2026-0000-037756
unclaimed
Moderate: Use-after-free in the Networking: DNS component
Credited as Mozilla
CVE-2026-117974
BR2026-0000-037757
unclaimed
Moderate: Use-after-free in the XML component
Credited as Mozilla
CVE-2026-117975
BR2026-0000-037758
unclaimed
Moderate: Sandbox escape due to invalid pointer in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-117976
BR2026-0000-037759
unclaimed
Moderate: Site isolation issue in the DOM: Navigation component
Credited as Shu Takahashi of Velcore Consulting Inc.
CVE-2026-117977
BR2026-0000-037760
unclaimed
Moderate: Other issue in the Console component
Credited as quanhx
CVE-2026-117978
BR2026-0000-037761
unclaimed
Moderate: Incorrect boundary conditions in the Graphics component
Credited as Mozilla
CVE-2026-117979
BR2026-0000-037762
unclaimed
Moderate: Incorrect boundary conditions in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-117980
BR2026-0000-037763
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Massimo Palozzi
CVE-2026-117981
BR2026-0000-037764
unclaimed
Moderate: Privilege escalation in the Toolkit component
Credited as Mozilla
CVE-2026-117982
BR2026-0000-037765
unclaimed
Moderate: Invalid pointer in the JavaScript Engine: JIT component
Credited as Mozilla
CVE-2026-117983
BR2026-0000-037766
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-118022
BR2026-0000-037767
unclaimed
Moderate: Sandbox escape due to use-after-free in the Disability Access APIs component
Credited as Mozilla
CVE-2026-117984
BR2026-0000-037768
unclaimed
Moderate: Incorrect boundary conditions in the Layout: Scrolling and Overflow component
Credited as Mozilla
CVE-2026-117985
BR2026-0000-037769
unclaimed
Moderate: Sandbox escape due to use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-117986
BR2026-0000-037770
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-117987
BR2026-0000-037771
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Mozilla
CVE-2026-117988
BR2026-0000-037772
unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
Credited as Mozilla
CVE-2026-117989
BR2026-0000-037773
unclaimed
Moderate: Use-after-free in the Graphics component
Credited as Nguyen Tuan Hung
CVE-2026-118023
BR2026-0000-037774
unclaimed
Moderate: Sandbox escape due to use-after-free in the Graphics: WebRender component
Credited as Mozilla