Search CVE reports


Toggle filters

141 – 150 of 3864 results


CVE-2026-117998

Medium priority
Vulnerable

Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Vulnerable — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
Show all 9 packages Show less packages

CVE-2026-117997

Medium priority
Vulnerable

Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Vulnerable — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
Show all 9 packages Show less packages

CVE-2026-117996

Medium priority
Vulnerable

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Vulnerable — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
Show all 9 packages Show less packages

CVE-2026-117995

Medium priority
Vulnerable

Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Vulnerable — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
Show all 9 packages Show less packages

CVE-2026-117994

Medium priority
Vulnerable

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Vulnerable — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
Show all 9 packages Show less packages

CVE-2026-117993

Medium priority
Vulnerable

Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Vulnerable — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
Show all 9 packages Show less packages

CVE-2026-117992

Medium priority
Vulnerable

Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Vulnerable — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
Show all 9 packages Show less packages

CVE-2026-117991

Medium priority
Vulnerable

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Vulnerable — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
Show all 9 packages Show less packages

CVE-2026-117990

Medium priority
Vulnerable

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Vulnerable — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
Show all 9 packages Show less packages

CVE-2026-117989

Medium priority
Vulnerable

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

9 affected packages

firefox, thunderbird, mozjs38, mozjs52, mozjs68...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox Not affected Not affected Not affected — —
thunderbird Not affected Not affected Vulnerable — —
mozjs38 Not in release Not in release Not in release — Needs evaluation
mozjs52 Not in release Not in release Not in release Ignored Ignored
mozjs68 Not in release Not in release Not in release Ignored —
mozjs78 Not in release Not in release Ignored — —
mozjs91 Not in release Not in release Ignored — —
mozjs102 Not in release Ignored Ignored — —
mozjs115 Not in release Ignored Not in release — —
Show all 9 packages Show less packages