Mozilla
Security Vulnerabilities fixed in Firefox ESR 115.44
MFSA2026-119 Oct 27, 2026 Source: Vendor
Imported from Mozilla security advisory MFSA2026-119. Draft.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
80 lines
Showing 51–80 of 80 , page 2 of 2
CVE-2026-117926
BR2026-0000-037595
unclaimed
High: Incorrect boundary conditions in the SVG component
Credited as Mozilla
CVE-2026-117927
BR2026-0000-037596
unclaimed
High: Use-after-free in the SVG component
Credited as Mozilla
CVE-2026-117929
BR2026-0000-037597
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-117930
BR2026-0000-037598
unclaimed
High: Use-after-free in the DOM: Bindings (WebIDL) component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117931
BR2026-0000-037599
unclaimed
High: Use-after-free in the DOM: Events component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117934
BR2026-0000-037600
unclaimed
High: Use-after-free in the Layout component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117935
BR2026-0000-037601
unclaimed
High: Use-after-free in the DOM: Bindings (WebIDL) component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117936
BR2026-0000-037602
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117937
BR2026-0000-037603
unclaimed
High: Invalid pointer in the JavaScript Engine component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117938
BR2026-0000-037604
unclaimed
High: Use-after-free in the Layout component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117939
BR2026-0000-037605
unclaimed
High: Use-after-free in the XML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117941
BR2026-0000-037606
unclaimed
High: Use-after-free in the DOM: CSS Object Model component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117942
BR2026-0000-037607
unclaimed
High: Incorrect boundary conditions in the JavaScript Engine: JIT component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117943
BR2026-0000-037608
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117944
BR2026-0000-037609
unclaimed
High: Use-after-free in the Layout component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117946
BR2026-0000-037610
unclaimed
High: Incorrect boundary conditions in the JavaScript Engine component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117948
BR2026-0000-037611
unclaimed
High: Use-after-free in the SVG component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117949
BR2026-0000-037612
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117950
BR2026-0000-037613
unclaimed
High: Incorrect boundary conditions in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117951
BR2026-0000-037614
unclaimed
High: Use-after-free in the DOM: Core & HTML component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117952
BR2026-0000-037615
unclaimed
High: Uninitialized memory in the Networking component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117954
BR2026-0000-037616
unclaimed
High: Use-after-free in the Layout: Positioned component
Credited as OpenAI Codex Security (kylebot)
CVE-2026-117966
BR2026-0000-037617
unclaimed
Moderate: Site isolation issue in the Networking: HTTP component
Credited as Mozilla
CVE-2026-117968
BR2026-0000-037618
unclaimed
Moderate: Use-after-free in the DOM: Core & HTML component
Credited as Mozilla
CVE-2026-117971
BR2026-0000-037619
unclaimed
Moderate: Sandbox escape due to use-after-free in the Print Preview component
Credited as Mozilla
CVE-2026-117974
BR2026-0000-037620
unclaimed
Moderate: Use-after-free in the XML component
Credited as Mozilla
CVE-2026-117978
BR2026-0000-037621
unclaimed
Moderate: Incorrect boundary conditions in the Graphics component
Credited as Mozilla
CVE-2026-117979
BR2026-0000-037622
unclaimed
Moderate: Incorrect boundary conditions in the Graphics: WebRender component
Credited as Mozilla
CVE-2026-117992
BR2026-0000-037623
unclaimed
Moderate: Information disclosure in the CSS Parsing and Computation component
Credited as Takashi Suzuki
CVE-2026-118027
BR2026-0000-037624
unclaimed
Low: Frame poisoning in the Layout component
Credited as Mozilla