By publication date

Exploited and new serious CVEs: October 2026

8,743 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 76 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
29Monitor	CVE-2026-117871No exploit	Invalid pointer in the Graphics componentmozilla · firefox · CWE-824 Pre-auth Memory safety	High7.3	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117872No exploit	Use-after-free in the JavaScript: Standard Library componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117873No exploit	Incorrect boundary conditions in the Audio/Video: Playback componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 27, 2026
29Monitor	CVE-2026-117879No exploit	Incorrect boundary conditions in the Layout: Tables componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High7.3	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117881No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117883No exploit	Use-after-free in the DOM: HTML Parser componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117884No exploit	Use-after-free in the Networking componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117886No exploit	Incorrect boundary conditions in the Graphics: Text componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117887No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
29Monitor	CVE-2026-117889No exploit	Incorrect boundary conditions in the JavaScript Engine componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High7.3	—	0.3%	Oct 27, 2026
29Monitor	CVE-2026-117890No exploit	JIT miscompilation in the JavaScript Engine: JIT componentmozilla · firefox · CWE-843 Pre-auth	High7.3	—	0.3%	Oct 27, 2026
29Monitor	CVE-2026-117891No exploit	Use-after-free in the JavaScript Engine: JIT componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High7.3	—	0.3%	Oct 27, 2026
29Monitor	CVE-2026-117892No exploit	Privilege escalation due to use-after-free in the WebRTC: Networking componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High7.3	—	0.3%	Oct 27, 2026
29Monitor	CVE-2026-117897No exploit	Incorrect boundary conditions in the Layout: Tables componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High7.3	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117899No exploit	Use-after-free in the Networking: HTTP componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117900No exploit	Use-after-free in the DOM: Editor componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117901No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117904No exploit	Use-after-free in the JavaScript: GC componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
29Monitor	CVE-2026-117910No exploit	Invalid pointer in the JavaScript Engine componentmozilla · firefox · CWE-824 Pre-auth Memory safety	High7.3	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117912No exploit	Same-origin policy bypass in the CSS Parsing and Computation componentmozilla · firefox · CWE-346 Pre-auth	High8.1	—	0.2%	Oct 27, 2026
29Monitor	CVE-2026-117915No exploit	Incorrect boundary conditions in the Layout: Block and Inline componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High7.3	—	0.3%	Oct 27, 2026
39Monitor	CVE-2026-117917No exploit	Invalid pointer in the Graphics: WebRender componentmozilla · firefox · CWE-824 Pre-auth Memory safety	Critical9.8	—	0.5%	Oct 27, 2026
35Monitor	CVE-2026-117918No exploit	Use-after-free in the Graphics: Canvas2D componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117919No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
38Monitor	CVE-2026-117920No exploit	Use-after-free in the DOM: HTML Parser componentmozilla · firefox · CWE-416 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117921No exploit	Use-after-free in the CSS Parsing and Computation componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117922No exploit	Use-after-free in the Networking: WebSockets componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117925No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.4%	Oct 27, 2026
32Monitor	CVE-2026-117926No exploit	Incorrect boundary conditions in the SVG componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117928No exploit	Same-origin policy bypass in the CSS Parsing and Computation componentmozilla · firefox · CWE-346 Pre-auth	High8.1	—	0.2%	Oct 27, 2026
35Monitor	CVE-2026-117929No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117930No exploit	Use-after-free in the DOM: Bindings (WebIDL) componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117931No exploit	Use-after-free in the DOM: Events componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117932No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117936No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
29Monitor	CVE-2026-117937No exploit	Invalid pointer in the JavaScript Engine componentmozilla · firefox · CWE-824 Pre-auth Memory safety	High7.3	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117940No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117941No exploit	Use-after-free in the DOM: CSS Object Model componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
29Monitor	CVE-2026-117942No exploit	Incorrect boundary conditions in the JavaScript Engine: JIT componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High7.3	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117943No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-415 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
39Monitor	CVE-2026-117945No exploit	Incorrect boundary conditions in the XML componentmozilla · firefox · CWE-119 Pre-auth Memory safety	Critical9.8	—	0.5%	Oct 27, 2026
39Monitor	CVE-2026-117946No exploit	Incorrect boundary conditions in the JavaScript Engine componentmozilla · firefox · CWE-119 Pre-auth Memory safety	Critical9.8	—	0.5%	Oct 27, 2026
35Monitor	CVE-2026-117949No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117950No exploit	Incorrect boundary conditions in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.4%	Oct 27, 2026
35Monitor	CVE-2026-117951No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117952No exploit	Uninitialized memory in the Networking componentmozilla · firefox · CWE-457 Pre-auth	High8.1	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117953No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117954No exploit	Use-after-free in the Layout: Positioned componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117955No exploit	JIT miscompilation in the JavaScript: WebAssembly componentmozilla · firefox · CWE-843 Pre-auth	High8.1	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117956No exploit	Invalid pointer in the Nimbus Desktop Client componentmozilla · firefox · CWE-824 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117957No exploit	Cryptographic issue in the WebRTC: Networking componentmozilla · firefox · CWE-325 Pre-auth	High8.1	—	0.2%	Oct 27, 2026
32Monitor	CVE-2026-117958No exploit	Site isolation issue in the Networking: HTTP componentmozilla · firefox · CWE-346 Pre-auth	High8.1	—	0.1%	Oct 27, 2026
32Monitor	CVE-2026-117959No exploit	Site isolation issue in the DOM: Service Workers componentmozilla · firefox · CWE-284 Pre-auth Broken access control (IDOR)	High8.1	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117961No exploit	Incorrect boundary conditions in the Layout: Text and Fonts componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 27, 2026
38Monitor	CVE-2026-117962No exploit	Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager componentmozilla · firefox · CWE-119 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117963No exploit	Incorrect boundary conditions in the DOM: Service Workers componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117964No exploit	Use-after-free in the Panning and Zooming componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117965No exploit	Same-origin policy bypass in the Address Bar componentmozilla · firefox · CWE-346 Pre-auth	High8.1	—	0.2%	Oct 27, 2026
32Monitor	CVE-2026-117966No exploit	Site isolation issue in the Networking: HTTP componentmozilla · firefox · CWE-346 Pre-auth	High8.1	—	0.2%	Oct 27, 2026
35Monitor	CVE-2026-117967No exploit	Mitigation bypass in the DOM: Security componentmozilla · firefox · CWE-693 Pre-auth	High8.8	—	0.4%	Oct 27, 2026
35Monitor	CVE-2026-117968No exploit	Use-after-free in the DOM: Core & HTML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117969No exploit	Invalid pointer in the JavaScript Engine: JIT componentmozilla · firefox · CWE-824 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117970No exploit	Race condition in the Disability Access APIs componentmozilla · firefox · CWE-362 Pre-auth Race condition	High8.8	—	0.3%	Oct 27, 2026
38Monitor	CVE-2026-117971No exploit	Sandbox escape due to use-after-free in the Print Preview componentmozilla · firefox · CWE-416 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117972No exploit	Use-after-free in the Graphics componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117973No exploit	Use-after-free in the Networking: DNS componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117974No exploit	Use-after-free in the XML componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117975No exploit	Sandbox escape due to invalid pointer in the Graphics: WebRender componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117976No exploit	Site isolation issue in the DOM: Navigation componentmozilla · firefox · CWE-346 Pre-auth	High8.1	—	0.1%	Oct 27, 2026
32Monitor	CVE-2026-117977No exploit	Other issue in the Console componentmozilla · firefox · CWE-117 Pre-auth	High8.1	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117978No exploit	Incorrect boundary conditions in the Graphics componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117979No exploit	Incorrect boundary conditions in the Graphics: WebRender componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.8	—	0.4%	Oct 27, 2026
39Monitor	CVE-2026-117980No exploit	Use-after-free in the Graphics componentmozilla · firefox · CWE-416 Pre-auth Memory safety	Critical9.8	—	0.4%	Oct 27, 2026
39Monitor	CVE-2026-117981No exploit	Privilege escalation in the Toolkit componentmozilla · firefox · CWE-269 Pre-auth	Critical9.8	—	0.4%	Oct 27, 2026
39Monitor	CVE-2026-117982No exploit	Invalid pointer in the JavaScript Engine: JIT componentmozilla · firefox · CWE-416 Pre-auth Memory safety	Critical9.8	—	0.5%	Oct 27, 2026
35Monitor	CVE-2026-117983No exploit	Use-after-free in the Graphics componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117984No exploit	Incorrect boundary conditions in the Layout: Scrolling and Overflow componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
38Monitor	CVE-2026-117985No exploit	Sandbox escape due to use-after-free in the Graphics componentmozilla · firefox · CWE-416 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117986No exploit	Use-after-free in the Graphics componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117987No exploit	Use-after-free in the Graphics componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
38Monitor	CVE-2026-117988No exploit	Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-119 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117989No exploit	Use-after-free in the Graphics componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
38Monitor	CVE-2026-117990No exploit	Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentmozilla · firefox · CWE-119 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117991No exploit	Incorrect boundary conditions in the Layout: Text and Fonts componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117993No exploit	Integer overflow in the Graphics: Text componentmozilla · firefox · CWE-190 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117994No exploit	Use-after-free in the JavaScript: GC componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117995No exploit	Privilege escalation in the DOM: UI Events & Focus Handling componentmozilla · firefox · CWE-284 Pre-auth Broken access control (IDOR)	High8.8	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-117996No exploit	Incorrect boundary conditions in the WebRTC componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 27, 2026
38Monitor	CVE-2026-117997No exploit	Sandbox escape due to use-after-free in the Widget componentmozilla · firefox · CWE-416 Pre-auth Memory safety	Critical9.6	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-117998No exploit	Mitigation bypass in the DOM: Push Subscriptions componentmozilla · firefox · CWE-693 Pre-auth	High8.8	—	0.4%	Oct 27, 2026
35Monitor	CVE-2026-117999No exploit	Race condition in the IPC componentmozilla · firefox · CWE-362 Pre-auth Race condition	High8.8	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-118000No exploit	Information disclosure in the Networking: HTTP componentmozilla · firefox · CWE-200 Pre-auth Info leak	High8.1	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-118002No exploit	Information disclosure due to race condition in the Networking componentmozilla · firefox · CWE-200 Pre-auth Race condition Info leak	High8.1	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-118003No exploit	Information disclosure in the Networking: DNS componentmozilla · firefox · CWE-200 Pre-auth Info leak	High8.1	—	0.3%	Oct 27, 2026
32Monitor	CVE-2026-118004No exploit	Incorrect boundary conditions in the CSS Transitions and Animations componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.1	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-118005No exploit	Use-after-free in the WebRTC: Signaling componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-118006No exploit	Privilege escalation due to use-after-free in the WebRTC: Signaling componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-118007No exploit	Use-after-free in the JavaScript: GC componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-118008No exploit	Privilege escalation in the DOM: Navigation componentmozilla · firefox · CWE-269 Pre-auth	High8.8	—	0.3%	Oct 27, 2026
35Monitor	CVE-2026-118009No exploit	Integer overflow, use-after-free in the Graphics: Text componentmozilla · firefox · CWE-190 Pre-auth Memory safety	High8.8	—	0.3%	Oct 27, 2026

CVE-2026-117871
29Monitor
Invalid pointer in the Graphics component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117872
35Monitor
Use-after-free in the JavaScript: Standard Library component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117873
32Monitor
Incorrect boundary conditions in the Audio/Video: Playback component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117879
29Monitor
Incorrect boundary conditions in the Layout: Tables component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117881
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117883
35Monitor
Use-after-free in the DOM: HTML Parser component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117884
35Monitor
Use-after-free in the Networking component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117886
32Monitor
Incorrect boundary conditions in the Graphics: Text component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117887
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117889
29Monitor
Incorrect boundary conditions in the JavaScript Engine component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117890
29Monitor
JIT miscompilation in the JavaScript Engine: JIT component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117891
29Monitor
Use-after-free in the JavaScript Engine: JIT component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117892
29Monitor
Privilege escalation due to use-after-free in the WebRTC: Networking component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117897
29Monitor
Incorrect boundary conditions in the Layout: Tables component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117899
35Monitor
Use-after-free in the Networking: HTTP component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117900
35Monitor
Use-after-free in the DOM: Editor component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117901
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117904
35Monitor
Use-after-free in the JavaScript: GC component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117910
29Monitor
Invalid pointer in the JavaScript Engine component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117912
32Monitor
Same-origin policy bypass in the CSS Parsing and Computation component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117915
29Monitor
Incorrect boundary conditions in the Layout: Block and Inline component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117917
39Monitor
Invalid pointer in the Graphics: WebRender component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117918
35Monitor
Use-after-free in the Graphics: Canvas2D component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117919
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117920
38Monitor
Use-after-free in the DOM: HTML Parser component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117921
35Monitor
Use-after-free in the CSS Parsing and Computation component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117922
35Monitor
Use-after-free in the Networking: WebSockets component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117925
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117926
32Monitor
Incorrect boundary conditions in the SVG component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117928
32Monitor
Same-origin policy bypass in the CSS Parsing and Computation component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117929
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117930
35Monitor
Use-after-free in the DOM: Bindings (WebIDL) component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117931
35Monitor
Use-after-free in the DOM: Events component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117932
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117936
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117937
29Monitor
Invalid pointer in the JavaScript Engine component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117940
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117941
35Monitor
Use-after-free in the DOM: CSS Object Model component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117942
29Monitor
Incorrect boundary conditions in the JavaScript Engine: JIT component
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117943
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117945
39Monitor
Incorrect boundary conditions in the XML component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117946
39Monitor
Incorrect boundary conditions in the JavaScript Engine component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117949
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117950
35Monitor
Incorrect boundary conditions in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117951
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117952
32Monitor
Uninitialized memory in the Networking component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117953
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117954
35Monitor
Use-after-free in the Layout: Positioned component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117955
32Monitor
JIT miscompilation in the JavaScript: WebAssembly component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117956
35Monitor
Invalid pointer in the Nimbus Desktop Client component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117957
32Monitor
Cryptographic issue in the WebRTC: Networking component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117958
32Monitor
Site isolation issue in the Networking: HTTP component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117959
32Monitor
Site isolation issue in the DOM: Service Workers component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
mozilla · firefoxOct 27, 2026
CVE-2026-117961
32Monitor
Incorrect boundary conditions in the Layout: Text and Fonts component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117962
38Monitor
Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117963
32Monitor
Incorrect boundary conditions in the DOM: Service Workers component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117964
35Monitor
Use-after-free in the Panning and Zooming component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117965
32Monitor
Same-origin policy bypass in the Address Bar component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117966
32Monitor
Site isolation issue in the Networking: HTTP component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117967
35Monitor
Mitigation bypass in the DOM: Security component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117968
35Monitor
Use-after-free in the DOM: Core & HTML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117969
35Monitor
Invalid pointer in the JavaScript Engine: JIT component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117970
35Monitor
Race condition in the Disability Access APIs component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Race condition
mozilla · firefoxOct 27, 2026
CVE-2026-117971
38Monitor
Sandbox escape due to use-after-free in the Print Preview component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117972
35Monitor
Use-after-free in the Graphics component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117973
35Monitor
Use-after-free in the Networking: DNS component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117974
35Monitor
Use-after-free in the XML component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117975
35Monitor
Sandbox escape due to invalid pointer in the Graphics: WebRender component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117976
32Monitor
Site isolation issue in the DOM: Navigation component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117977
32Monitor
Other issue in the Console component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117978
32Monitor
Incorrect boundary conditions in the Graphics component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117979
35Monitor
Incorrect boundary conditions in the Graphics: WebRender component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117980
39Monitor
Use-after-free in the Graphics component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117981
39Monitor
Privilege escalation in the Toolkit component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117982
39Monitor
Invalid pointer in the JavaScript Engine: JIT component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117983
35Monitor
Use-after-free in the Graphics component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117984
35Monitor
Incorrect boundary conditions in the Layout: Scrolling and Overflow component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117985
38Monitor
Sandbox escape due to use-after-free in the Graphics component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117986
35Monitor
Use-after-free in the Graphics component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117987
35Monitor
Use-after-free in the Graphics component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117988
38Monitor
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117989
35Monitor
Use-after-free in the Graphics component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117990
38Monitor
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117991
35Monitor
Incorrect boundary conditions in the Layout: Text and Fonts component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117993
35Monitor
Integer overflow in the Graphics: Text component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117994
35Monitor
Use-after-free in the JavaScript: GC component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117995
35Monitor
Privilege escalation in the DOM: UI Events & Focus Handling component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
mozilla · firefoxOct 27, 2026
CVE-2026-117996
32Monitor
Incorrect boundary conditions in the WebRTC component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117997
38Monitor
Sandbox escape due to use-after-free in the Widget component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-117998
35Monitor
Mitigation bypass in the DOM: Push Subscriptions component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-117999
35Monitor
Race condition in the IPC component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Race condition
mozilla · firefoxOct 27, 2026
CVE-2026-118000
32Monitor
Information disclosure in the Networking: HTTP component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Info leak
mozilla · firefoxOct 27, 2026
CVE-2026-118002
32Monitor
Information disclosure due to race condition in the Networking component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Race condition
- Info leak
mozilla · firefoxOct 27, 2026
CVE-2026-118003
32Monitor
Information disclosure in the Networking: DNS component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Info leak
mozilla · firefoxOct 27, 2026
CVE-2026-118004
32Monitor
Incorrect boundary conditions in the CSS Transitions and Animations component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-118005
35Monitor
Use-after-free in the WebRTC: Signaling component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-118006
35Monitor
Privilege escalation due to use-after-free in the WebRTC: Signaling component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-118007
35Monitor
Use-after-free in the JavaScript: GC component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026
CVE-2026-118008
35Monitor
Privilege escalation in the DOM: Navigation component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxOct 27, 2026
CVE-2026-118009
35Monitor
Integer overflow, use-after-free in the Graphics: Text component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxOct 27, 2026