PatchFirst · Latest vulnerabilities

mozjs115 vulnerabilities · Page 9

Vulnerabilities published for mozjs115 in the last 30 days: 257. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 1018

CVE-2026-117872
Not ratedEPSS 0.19%No fix published
Use-after-free in the JavaScript: Standard Library component
Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117871
Not ratedEPSS 0.18%No fix published
Invalid pointer in the Graphics component
Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117870
Not ratedEPSS 0.19%No fix published
Use-after-free in the JavaScript Engine component
Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117869
Not ratedEPSS 0.19%No fix published
Use-after-free in the DOM: Core & HTML component
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117868
Not ratedEPSS 0.19%No fix published
Sandbox escape in the DOM: Networking component
Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117867
Not ratedEPSS 0.19%No fix published
Use-after-free in the Layout component
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117866
Not ratedEPSS 0.19%No fix published
Privilege escalation due to use-after-free in the Graphics: Canvas2D component
Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117865
Not ratedEPSS 0.18%No fix published
Use-after-free in the JavaScript: GC component
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117864
Not ratedEPSS 0.18%No fix published
Sandbox escape in the Form Manager component
Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117863
Not ratedEPSS 0.19%No fix published
Information disclosure due to uninitialized memory in the Audio/Video component
Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117862
Not ratedEPSS 0.19%No fix published
Privilege escalation due to incorrect boundary conditions in the Networking component
Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117861
Not ratedEPSS 0.18%No fix published
Sandbox escape in the DOM: Navigation component
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-117860
Not ratedEPSS 0.19%No fix published
Same-origin policy bypass in the DOM: Navigation component
Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
mozjs115 Operating systems
Published October 27, 2026Updated October 27, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-113401
Medium · CVSS 6.5EPSS 0.35%No fix published
Denial-of-service in the PDF Viewer component
Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.
mozjs115 Operating systems
Published October 20, 2026Updated October 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-113400
Medium · CVSS 5.4EPSS 0.26%No fix published
Uninitialized memory in the Audio/Video: cubeb component
Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.
mozjs115 Operating systems
Published October 20, 2026Updated October 20, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-113399
Critical · CVSS 9.8EPSS 0.18%No fix published
Incorrect boundary conditions in the SVG component
Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.
mozjs115 Operating systems
Published October 20, 2026Updated October 29, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-113470
Medium · CVSS 5.4EPSS 0.46%No fix published
Cryptographic issue in the Security Block-lists, Allow-lists, and other State component
Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2.
mozjs115 Operating systems
Published October 20, 2026Updated October 21, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109783
High · CVSS 8.3EPSS 0.27%No fix published
Mitigation bypass in the File Handling component
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.
mozjs115 Operating systems
Published October 13, 2026Updated October 26, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109782
High · CVSS 8.3EPSS 0.27%No fix published
Mitigation bypass in the File Handling component
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.
mozjs115 Operating systems
Published October 13, 2026Updated October 26, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2026-109781
Medium · CVSS 6.5EPSS 0.25%No fix published
Denial-of-service in the Printing: Output component
Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
mozjs115 Operating systems
Published October 13, 2026Updated October 13, 2026
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →

mozjs115 vulnerabilities · Page 9

Use-after-free in the JavaScript: Standard Library component

Invalid pointer in the Graphics component

Use-after-free in the JavaScript Engine component

Use-after-free in the DOM: Core & HTML component

Sandbox escape in the DOM: Networking component

Use-after-free in the Layout component

Privilege escalation due to use-after-free in the Graphics: Canvas2D component

Use-after-free in the JavaScript: GC component

Sandbox escape in the Form Manager component

Information disclosure due to uninitialized memory in the Audio/Video component

Privilege escalation due to incorrect boundary conditions in the Networking component

Sandbox escape in the DOM: Navigation component

Same-origin policy bypass in the DOM: Navigation component

Denial-of-service in the PDF Viewer component

Uninitialized memory in the Audio/Video: cubeb component

Incorrect boundary conditions in the SVG component

Cryptographic issue in the Security Block-lists, Allow-lists, and other State component

Mitigation bypass in the File Handling component

Mitigation bypass in the File Handling component

Denial-of-service in the Printing: Output component

Check your server