BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Mozilla

Security Vulnerabilities fixed in Firefox ESR 115.44

MFSA2026-119 Oct 27, 2026 Source: Vendor

Imported from Mozilla security advisory MFSA2026-119. Draft.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

80 lines
All 80 CVEs 80 Additional recognition 0 Unclaimed only
Showing 1–50 of 80 , page 1 of 2
CVE-2026-109705 BR2026-0000-037545 unclaimed
High: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component
Credited as Mozilla
CVE-2026-117862 BR2026-0000-037546 unclaimed
High: Privilege escalation due to incorrect boundary conditions in the Networking component
Credited as Mozilla
CVE-2026-117863 BR2026-0000-037547 unclaimed
High: Information disclosure due to uninitialized memory in the Audio/Video component
Credited as Mozilla
CVE-2026-117866 BR2026-0000-037548 unclaimed
High: Privilege escalation due to use-after-free in the Graphics: Canvas2D component
Credited as Mozilla
CVE-2026-117867 BR2026-0000-037549 unclaimed
High: Use-after-free in the Layout component
Credited as Mozilla
CVE-2026-109707 BR2026-0000-037550 unclaimed
High: Sandbox escape due to use-after-free in the Networking component
Credited as Mozilla
CVE-2026-109708 BR2026-0000-037551 unclaimed
High: Sandbox escape due to incorrect boundary conditions in the Networking component
Credited as Mozilla
CVE-2026-117868 BR2026-0000-037552 unclaimed
High: Sandbox escape in the DOM: Networking component
Credited as Yaqoub Aldurayhim
CVE-2026-117869 BR2026-0000-037553 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-117870 BR2026-0000-037554 unclaimed
High: Use-after-free in the JavaScript Engine component
Credited as Mozilla
CVE-2026-117872 BR2026-0000-037555 unclaimed
High: Use-after-free in the JavaScript: Standard Library component
Credited as Mozilla
CVE-2026-117873 BR2026-0000-037556 unclaimed
High: Incorrect boundary conditions in the Audio/Video: Playback component
Credited as Mozilla
CVE-2026-117874 BR2026-0000-037557 unclaimed
High: Use-after-free in the Internationalization component
Credited as Mozilla
CVE-2026-117876 BR2026-0000-037558 unclaimed
High: Use-after-free in the Layout: Text and Fonts component
Credited as Amy Burnett of OpenAI
CVE-2026-117878 BR2026-0000-037559 unclaimed
High: Other issue, use-after-free in the Storage: IndexedDB component
Credited as Amy Burnett of OpenAI
CVE-2026-117879 BR2026-0000-037560 unclaimed
High: Incorrect boundary conditions in the Layout: Tables component
Credited as Amy Burnett of OpenAI
CVE-2026-117880 BR2026-0000-037561 unclaimed
High: Use-after-free in the XML component
Credited as Mozilla
CVE-2026-117881 BR2026-0000-037562 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Amy Burnett of OpenAI
CVE-2026-117882 BR2026-0000-037563 unclaimed
High: Use-after-free in the Layout component
Credited as Amy Burnett of OpenAI
CVE-2026-117883 BR2026-0000-037564 unclaimed
High: Use-after-free in the DOM: HTML Parser component
Credited as Amy Burnett of OpenAI
CVE-2026-117884 BR2026-0000-037565 unclaimed
High: Use-after-free in the Networking component
Credited as Mozilla
CVE-2026-117886 BR2026-0000-037566 unclaimed
High: Incorrect boundary conditions in the Graphics: Text component
Credited as tsui
CVE-2026-117887 BR2026-0000-037567 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-117889 BR2026-0000-037568 unclaimed
High: Incorrect boundary conditions in the JavaScript Engine component
Credited as Mozilla
CVE-2026-117891 BR2026-0000-037569 unclaimed
High: Use-after-free in the JavaScript Engine: JIT component
Credited as Mozilla
CVE-2026-117892 BR2026-0000-037570 unclaimed
High: Privilege escalation due to use-after-free in the WebRTC: Networking component
Credited as Mozilla
CVE-2026-117893 BR2026-0000-037571 unclaimed
High: Incorrect boundary conditions in the Security: PSM component
Credited as Mozilla
CVE-2026-117895 BR2026-0000-037572 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-117896 BR2026-0000-037573 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-117897 BR2026-0000-037574 unclaimed
High: Incorrect boundary conditions in the Layout: Tables component
Credited as Mozilla
CVE-2026-117899 BR2026-0000-037575 unclaimed
High: Use-after-free in the Networking: HTTP component
Credited as Mozilla
CVE-2026-117900 BR2026-0000-037576 unclaimed
High: Use-after-free in the DOM: Editor component
Credited as Mozilla
CVE-2026-117901 BR2026-0000-037577 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-117903 BR2026-0000-037578 unclaimed
High: Use-after-free in the Audio/Video component
Credited as Mozilla
CVE-2026-117905 BR2026-0000-037579 unclaimed
High: Use-after-free in the Audio/Video: Playback component
Credited as Mozilla
CVE-2026-117906 BR2026-0000-037580 unclaimed
High: Use-after-free in the CSS Parsing and Computation component
Credited as Mozilla
CVE-2026-117907 BR2026-0000-037581 unclaimed
High: Use-after-free in the Networking component
Credited as Mozilla
CVE-2026-117908 BR2026-0000-037582 unclaimed
High: Use-after-free in the Graphics: ImageLib component
Credited as Mozilla
CVE-2026-117911 BR2026-0000-037583 unclaimed
High: Use-after-free in the Audio/Video: Playback component
Credited as Mozilla
CVE-2026-117912 BR2026-0000-037584 unclaimed
High: Same-origin policy bypass in the CSS Parsing and Computation component
Credited as Takashi Suzuki
CVE-2026-117914 BR2026-0000-037585 unclaimed
High: Use-after-free in the SVG component
Credited as Mozilla
CVE-2026-117915 BR2026-0000-037586 unclaimed
High: Incorrect boundary conditions in the Layout: Block and Inline component
Credited as Mozilla
CVE-2026-117917 BR2026-0000-037587 unclaimed
High: Invalid pointer in the Graphics: WebRender component
Credited as Nguyen Tuan Hung
CVE-2026-117918 BR2026-0000-037588 unclaimed
High: Use-after-free in the Graphics: Canvas2D component
Credited as Mozilla
CVE-2026-117919 BR2026-0000-037589 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-117921 BR2026-0000-037590 unclaimed
High: Use-after-free in the CSS Parsing and Computation component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117922 BR2026-0000-037591 unclaimed
High: Use-after-free in the Networking: WebSockets component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117923 BR2026-0000-037592 unclaimed
High: Use-after-free in the Audio/Video component
Credited as Mozilla
CVE-2026-117924 BR2026-0000-037593 unclaimed
High: Use-after-free in the XSLT component
Credited as Mozilla
CVE-2026-117925 BR2026-0000-037594 unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla