TI-2026-71856 CVE-2026-109707 · GHSA-jqm6-q6j2-85mx
Sandbox escape from use-after-free in Mozilla Firefox Networking
Priority MEDIUM 43
Sandbox escape due to use-after-free in the Networking component.
RHSA-2026:89758
firefox security, bug fix, and enhancement update
Released 2026-10-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) firefox-153.5.0-1.el10_2
Fixes 29 records
TI-2026-71854 CVE-2026-109705 · GHSA-mjw9-3pg2-vh5w
Sandbox escape and use-after-free in Mozilla Firefox and Thunderbird
Priority MEDIUM 43
Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component.
TI-2026-71665 CVE-2026-109740 · GHSA-rp57-hr33-wfgr
Sandbox escape in Mozilla Firefox and Thunderbird Win32 widget
Priority MEDIUM 43
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.
TI-2026-71649 CVE-2026-109708 · GHSA-589f-33q5-grw7
Sandbox escape in Mozilla Firefox and Thunderbird networking
Priority MEDIUM 43
Sandbox escape due to incorrect boundary conditions in the Networking component.
TI-2026-69154 CVE-2026-77214 · GHSA-8xfx-9m5m-pgcp
Heap buffer over-read in libexpat XML_ParseBuffer
Priority MEDIUM 42
libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c.
TI-2026-71857 CVE-2026-109709 · GHSA-c4mq-cc7v-mw2m
Information disclosure in Mozilla Firefox and Thunderbird sandboxing
Priority MEDIUM 40
Information disclosure, privilege escalation in the Security: Process Sandboxing component.
TI-2026-71658 CVE-2026-109730 · GHSA-h2w2-cc3v-p4vg
Integer overflow in Graphics of Mozilla Firefox and Thunderbird
Priority MEDIUM 40
Integer overflow in the Graphics component.
TI-2026-71648 CVE-2026-109704 · GHSA-2rfh-6j5m-8mfw
Privilege escalation in Firefox and Thunderbird Application Update
Priority MEDIUM 40
Privilege escalation in the Application Update component.
TI-2026-71656 CVE-2026-109722 · GHSA-595g-xpmf-vrxq
JIT miscompilation in the Firefox JavaScript engine
Priority LOW 37
JIT miscompilation in the JavaScript Engine: JIT component.
TI-2026-71653 CVE-2026-109716 · GHSA-j4g4-pvfp-4qg5
Incorrect boundary checks in Firefox JavaScript Engine
Priority LOW 37
Incorrect boundary conditions in the JavaScript Engine component.
TI-2026-71652 CVE-2026-109715 · GHSA-m8f5-fc69-f3j6
Firefox and Thunderbird JavaScript Engine Memory Buffer Boundary Flaw
Priority LOW 35
Incorrect boundary conditions in the JavaScript Engine component.
TI-2026-33006 CVE-2026-45186 · GHSA-r396-2q2c-pjhr
In libexpat before 2.8.1, the computational complexity of attribute name collision checks…
Priority LOW 33
In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.
TI-2026-71654 CVE-2026-109720 · GHSA-5r38-4r4j-9hg3
JIT miscompilation in Mozilla Firefox and Thunderbird WebAssembly
Priority LOW 31
JIT miscompilation in the JavaScript: WebAssembly component.
TI-2026-71650 CVE-2026-109712 · GHSA-qprj-mxfp-87w7
Sandbox escape in Mozilla Firefox and Thunderbird graphics component
Priority LOW 31
Sandbox escape due to uninitialized memory in the Graphics component.
TI-2026-71870 CVE-2026-109732 · GHSA-vf8c-r45h-cvhp
Use-after-free in Mozilla Firefox and Thunderbird Streams component
Priority LOW 24
Use-after-free in the DOM: Streams component.
TI-2026-71869 CVE-2026-109729 · GHSA-h6qv-7hjp-gr8f
Use-after-free in the JavaScript Engine: JIT component
Priority LOW 24
Use-after-free in the JavaScript Engine: JIT component.
TI-2026-71868 CVE-2026-109728 · GHSA-7c6q-3qx5-qp9x
Use-after-free in Mozilla Firefox and Thunderbird Animation component
Priority LOW 24
Use-after-free in the DOM: Animation component.
TI-2026-71867 CVE-2026-109727 · GHSA-4cg4-mwp3-58fc
Use-after-free in Mozilla Firefox and Thunderbird Audio/Video
Priority LOW 24
Use-after-free in the Audio/Video component.
TI-2026-71866 CVE-2026-109726 · GHSA-rr85-3f75-v62f
Use-after-free in the SVG component of Mozilla Firefox and Thunderbird
Priority LOW 24
Use-after-free in the SVG component.
TI-2026-71865 CVE-2026-109725 · GHSA-h2fj-2h2q-386x
Use-after-free in Mozilla Firefox and Thunderbird DOM component
Priority LOW 24
Use-after-free in the DOM: Core & HTML component.
TI-2026-71864 CVE-2026-109724 · GHSA-cw6g-6frr-px9q
Use-after-free in Mozilla Firefox and Thunderbird DOM component
Priority LOW 24
Use-after-free in the DOM: Core & HTML component.
TI-2026-71862 CVE-2026-109718 · GHSA-m37p-7gw6-62vr
Use-after-free in XML component of Mozilla Firefox and Thunderbird
Priority LOW 24
Use-after-free in the XML component.
TI-2026-71861 CVE-2026-109717 · GHSA-3fxh-rfxv-74gh
Use-after-free in Mozilla Firefox and Thunderbird DOM bindings
Priority LOW 24
Use-after-free in the DOM: Bindings (WebIDL) component.
TI-2026-71860 CVE-2026-109713 · GHSA-mw96-gf64-c265
Use-after-free in Mozilla Firefox and Thunderbird Crash Reporting
Priority LOW 24
Use-after-free in the Crash Reporting component.
TI-2026-71859 CVE-2026-109711 · GHSA-5j3c-f6j9-v5mp
Use-after-free in Mozilla Firefox and Thunderbird Canvas2D component
Priority LOW 24
Use-after-free in the Graphics: Canvas2D component.
TI-2026-71855 CVE-2026-109706 · GHSA-w76r-6v84-vvf5
Use after free in Mozilla Firefox
Priority LOW 24
Use-after-free in the Storage: IndexedDB component.
TI-2026-71657 CVE-2026-109723 · GHSA-94rc-qqr5-2gj6
Integer overflow in Mozilla Firefox and Thunderbird Layout component
Priority LOW 24
Integer overflow in the Layout: Text and Fonts component.
TI-2026-71655 CVE-2026-109721 · GHSA-h7f3-g97w-8vxg
Incorrect boundary conditions in Firefox and Thunderbird JIT
Priority LOW 24
Incorrect boundary conditions in the JavaScript Engine: JIT component.
TI-2026-71863 CVE-2026-109719 · GHSA-gxhg-h66x-3v4w
Race condition and use-after-free in Mozilla Firefox and Thunderbird
Priority LOW 19
Race condition, use-after-free in the Graphics: CanvasWebGL component.