Mozilla
Security Vulnerabilities fixed in Firefox 159
MFSA2026-118 Oct 27, 2026 Source: Vendor
Imported from Mozilla security advisory MFSA2026-118. Draft.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
167 lines
Showing 151–167 of 167 , page 4 of 4
CVE-2026-117990
BR2026-0000-037775
unclaimed
Moderate: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-117991
BR2026-0000-037776
unclaimed
Moderate: Incorrect boundary conditions in the Layout: Text and Fonts component
Credited as Mozilla
CVE-2026-117992
BR2026-0000-037777
unclaimed
Moderate: Information disclosure in the CSS Parsing and Computation component
Credited as Takashi Suzuki
CVE-2026-117993
BR2026-0000-037778
unclaimed
Moderate: Integer overflow in the Graphics: Text component
Credited as 5up3rh3i
CVE-2026-117994
BR2026-0000-037779
unclaimed
Moderate: Use-after-free in the JavaScript: GC component
Credited as Mozilla
CVE-2026-117995
BR2026-0000-037780
unclaimed
Moderate: Privilege escalation in the DOM: UI Events & Focus Handling component
Credited as haruka yamazaki
CVE-2026-117996
BR2026-0000-037781
unclaimed
Moderate: Incorrect boundary conditions in the WebRTC component
Credited as Mozilla
CVE-2026-117997
BR2026-0000-037782
unclaimed
Moderate: Sandbox escape due to use-after-free in the Widget component
Credited as Mozilla
CVE-2026-118024
BR2026-0000-037783
unclaimed
Moderate: Use-after-free in the Graphics: Text component
Credited as Mozilla
CVE-2026-118025
BR2026-0000-037784
unclaimed
Moderate: Other issue in the SVG component
Credited as Mozilla
CVE-2026-117998
BR2026-0000-037785
unclaimed
Low: Mitigation bypass in the DOM: Push Subscriptions component
Credited as Ibuki Sato
CVE-2026-117999
BR2026-0000-037786
unclaimed
Low: Race condition in the IPC component
Credited as Mozilla
CVE-2026-118000
BR2026-0000-037787
unclaimed
Low: Information disclosure in the Networking: HTTP component
Credited as Mozilla
CVE-2026-118002
BR2026-0000-037788
unclaimed
Low: Information disclosure due to race condition in the Networking component
Credited as Abdulrahman Alzahrani
CVE-2026-118003
BR2026-0000-037789
unclaimed
Low: Information disclosure in the Networking: DNS component
Credited as eldjiikgull
CVE-2026-118026
BR2026-0000-037790
unclaimed
Low: Invalid pointer in the JavaScript: GC component
Credited as Mozilla
CVE-2026-118004
BR2026-0000-037791
unclaimed
Low: Incorrect boundary conditions in the CSS Transitions and Animations component
Credited as Mozilla