{
  "fix": "ELSA-2026-94405",
  "url": "https://patchblox.com/security/fix/linux/elsa-2026-94405",
  "summary": "ELSA-2026-94405, released November 7, 2026, fixes 144 CVEs in firefox (version 0:153.6.0-1.0.1.el8_10). None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "firefox security update",
  "released": "2026-11-07T00:48:28Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-117946, rated Critical",
  "supported": true,
  "cveCount": 144,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00528,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2026-94405.html",
  "appliesTo": [
    {
      "product": "firefox",
      "productUrl": "https://patchblox.com/security/product/linux/firefox",
      "release": "ol 8",
      "fixedVersion": "0:153.6.0-1.0.1.el8_10",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-117862",
      "url": "https://patchblox.com/security/cve/CVE-2026-117862",
      "title": "firefox-esr: Privilege escalation due to incorrect boundary conditions in the Networking component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117917",
      "url": "https://patchblox.com/security/cve/CVE-2026-117917",
      "title": "firefox-esr: Invalid pointer in the Graphics: WebRender component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117946",
      "url": "https://patchblox.com/security/cve/CVE-2026-117946",
      "title": "firefox-esr: Incorrect boundary conditions in the JavaScript Engine component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117945",
      "url": "https://patchblox.com/security/cve/CVE-2026-117945",
      "title": "firefox-esr: Incorrect boundary conditions in the XML component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00505,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117982",
      "url": "https://patchblox.com/security/cve/CVE-2026-117982",
      "title": "firefox-esr: Invalid pointer in the JavaScript Engine: JIT component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00505,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117980",
      "url": "https://patchblox.com/security/cve/CVE-2026-117980",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117981",
      "url": "https://patchblox.com/security/cve/CVE-2026-117981",
      "title": "firefox-esr: Privilege escalation in the Toolkit component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117868",
      "url": "https://patchblox.com/security/cve/CVE-2026-117868",
      "title": "firefox-esr: Sandbox escape in the DOM: Networking component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117971",
      "url": "https://patchblox.com/security/cve/CVE-2026-117971",
      "title": "firefox-esr: Sandbox escape due to use-after-free in the Print Preview component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117861",
      "url": "https://patchblox.com/security/cve/CVE-2026-117861",
      "title": "firefox-esr: Sandbox escape in the DOM: Navigation component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117962",
      "url": "https://patchblox.com/security/cve/CVE-2026-117962",
      "title": "firefox-esr: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117988",
      "url": "https://patchblox.com/security/cve/CVE-2026-117988",
      "title": "firefox-esr: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117990",
      "url": "https://patchblox.com/security/cve/CVE-2026-117990",
      "title": "firefox-esr: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117920",
      "url": "https://patchblox.com/security/cve/CVE-2026-117920",
      "title": "firefox-esr: Use-after-free in the DOM: HTML Parser component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117985",
      "url": "https://patchblox.com/security/cve/CVE-2026-117985",
      "title": "firefox-esr: Sandbox escape due to use-after-free in the Graphics component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117997",
      "url": "https://patchblox.com/security/cve/CVE-2026-117997",
      "title": "firefox-esr: Sandbox escape due to use-after-free in the Widget component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117925",
      "url": "https://patchblox.com/security/cve/CVE-2026-117925",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00433,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117967",
      "url": "https://patchblox.com/security/cve/CVE-2026-117967",
      "title": "firefox-esr: Mitigation bypass in the DOM: Security component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117998",
      "url": "https://patchblox.com/security/cve/CVE-2026-117998",
      "title": "firefox-esr: Mitigation bypass in the DOM: Push Subscriptions component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117950",
      "url": "https://patchblox.com/security/cve/CVE-2026-117950",
      "title": "firefox-esr: Incorrect boundary conditions in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117979",
      "url": "https://patchblox.com/security/cve/CVE-2026-117979",
      "title": "firefox-esr: Incorrect boundary conditions in the Graphics: WebRender component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117869",
      "url": "https://patchblox.com/security/cve/CVE-2026-117869",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117872",
      "url": "https://patchblox.com/security/cve/CVE-2026-117872",
      "title": "firefox-esr: Use-after-free in the JavaScript: Standard Library component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117881",
      "url": "https://patchblox.com/security/cve/CVE-2026-117881",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117883",
      "url": "https://patchblox.com/security/cve/CVE-2026-117883",
      "title": "firefox-esr: Use-after-free in the DOM: HTML Parser component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117884",
      "url": "https://patchblox.com/security/cve/CVE-2026-117884",
      "title": "firefox-esr: Use-after-free in the Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117887",
      "url": "https://patchblox.com/security/cve/CVE-2026-117887",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117899",
      "url": "https://patchblox.com/security/cve/CVE-2026-117899",
      "title": "firefox-esr: Use-after-free in the Networking: HTTP component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117900",
      "url": "https://patchblox.com/security/cve/CVE-2026-117900",
      "title": "firefox-esr: Use-after-free in the DOM: Editor component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117901",
      "url": "https://patchblox.com/security/cve/CVE-2026-117901",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117918",
      "url": "https://patchblox.com/security/cve/CVE-2026-117918",
      "title": "firefox-esr: Use-after-free in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117919",
      "url": "https://patchblox.com/security/cve/CVE-2026-117919",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117921",
      "url": "https://patchblox.com/security/cve/CVE-2026-117921",
      "title": "firefox-esr: Use-after-free in the CSS Parsing and Computation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117922",
      "url": "https://patchblox.com/security/cve/CVE-2026-117922",
      "title": "firefox-esr: Use-after-free in the Networking: WebSockets component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117929",
      "url": "https://patchblox.com/security/cve/CVE-2026-117929",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117930",
      "url": "https://patchblox.com/security/cve/CVE-2026-117930",
      "title": "firefox-esr: Use-after-free in the DOM: Bindings (WebIDL) component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117931",
      "url": "https://patchblox.com/security/cve/CVE-2026-117931",
      "title": "thunderbird: Use-after-free in the DOM: Events component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117936",
      "url": "https://patchblox.com/security/cve/CVE-2026-117936",
      "title": "thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117941",
      "url": "https://patchblox.com/security/cve/CVE-2026-117941",
      "title": "firefox-esr: Use-after-free in the DOM: CSS Object Model component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117943",
      "url": "https://patchblox.com/security/cve/CVE-2026-117943",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117949",
      "url": "https://patchblox.com/security/cve/CVE-2026-117949",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117951",
      "url": "https://patchblox.com/security/cve/CVE-2026-117951",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117954",
      "url": "https://patchblox.com/security/cve/CVE-2026-117954",
      "title": "firefox-esr: Use-after-free in the Layout: Positioned component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117968",
      "url": "https://patchblox.com/security/cve/CVE-2026-117968",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117974",
      "url": "https://patchblox.com/security/cve/CVE-2026-117974",
      "title": "firefox-esr: Use-after-free in the XML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117864",
      "url": "https://patchblox.com/security/cve/CVE-2026-117864",
      "title": "firefox-esr: Sandbox escape in the Form Manager component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117956",
      "url": "https://patchblox.com/security/cve/CVE-2026-117956",
      "title": "firefox-esr: Invalid pointer in the Nimbus Desktop Client component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117969",
      "url": "https://patchblox.com/security/cve/CVE-2026-117969",
      "title": "firefox-esr: Invalid pointer in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117975",
      "url": "https://patchblox.com/security/cve/CVE-2026-117975",
      "title": "firefox-esr: Sandbox escape due to invalid pointer in the Graphics: WebRender component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117984",
      "url": "https://patchblox.com/security/cve/CVE-2026-117984",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Scrolling and Overflow component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117991",
      "url": "https://patchblox.com/security/cve/CVE-2026-117991",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117993",
      "url": "https://patchblox.com/security/cve/CVE-2026-117993",
      "title": "firefox-esr: Integer overflow in the Graphics: Text component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117926",
      "url": "https://patchblox.com/security/cve/CVE-2026-117926",
      "title": "firefox-esr: Incorrect boundary conditions in the SVG component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117978",
      "url": "https://patchblox.com/security/cve/CVE-2026-117978",
      "title": "thunderbird: Incorrect boundary conditions in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117873",
      "url": "https://patchblox.com/security/cve/CVE-2026-117873",
      "title": "firefox-esr: Incorrect boundary conditions in the Audio/Video: Playback component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117886",
      "url": "https://patchblox.com/security/cve/CVE-2026-117886",
      "title": "firefox-esr: Incorrect boundary conditions in the Graphics: Text component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117952",
      "url": "https://patchblox.com/security/cve/CVE-2026-117952",
      "title": "firefox-esr: Uninitialized memory in the Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117904",
      "url": "https://patchblox.com/security/cve/CVE-2026-117904",
      "title": "firefox-esr: Use-after-free in the JavaScript: GC component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117932",
      "url": "https://patchblox.com/security/cve/CVE-2026-117932",
      "title": "thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117940",
      "url": "https://patchblox.com/security/cve/CVE-2026-117940",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117953",
      "url": "https://patchblox.com/security/cve/CVE-2026-117953",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117964",
      "url": "https://patchblox.com/security/cve/CVE-2026-117964",
      "title": "firefox-esr: Use-after-free in the Panning and Zooming component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117972",
      "url": "https://patchblox.com/security/cve/CVE-2026-117972",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117973",
      "url": "https://patchblox.com/security/cve/CVE-2026-117973",
      "title": "firefox-esr: Use-after-free in the Networking: DNS component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117983",
      "url": "https://patchblox.com/security/cve/CVE-2026-117983",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117986",
      "url": "https://patchblox.com/security/cve/CVE-2026-117986",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117987",
      "url": "https://patchblox.com/security/cve/CVE-2026-117987",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117989",
      "url": "https://patchblox.com/security/cve/CVE-2026-117989",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117994",
      "url": "https://patchblox.com/security/cve/CVE-2026-117994",
      "title": "thunderbird: Use-after-free in the JavaScript: GC component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118000",
      "url": "https://patchblox.com/security/cve/CVE-2026-118000",
      "title": "firefox-esr: Information disclosure in the Networking: HTTP component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118002",
      "url": "https://patchblox.com/security/cve/CVE-2026-118002",
      "title": "firefox-esr: Information disclosure due to race condition in the Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118003",
      "url": "https://patchblox.com/security/cve/CVE-2026-118003",
      "title": "firefox-esr: Information disclosure in the Networking: DNS component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117955",
      "url": "https://patchblox.com/security/cve/CVE-2026-117955",
      "title": "firefox-esr: JIT miscompilation in the JavaScript: WebAssembly component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117995",
      "url": "https://patchblox.com/security/cve/CVE-2026-117995",
      "title": "firefox-esr: Privilege escalation in the DOM: UI Events \u0026 Focus Handling component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117961",
      "url": "https://patchblox.com/security/cve/CVE-2026-117961",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117963",
      "url": "https://patchblox.com/security/cve/CVE-2026-117963",
      "title": "firefox-esr: Incorrect boundary conditions in the DOM: Service Workers component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117977",
      "url": "https://patchblox.com/security/cve/CVE-2026-117977",
      "title": "thunderbird: Other issue in the Console component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117996",
      "url": "https://patchblox.com/security/cve/CVE-2026-117996",
      "title": "firefox-esr: Incorrect boundary conditions in the WebRTC component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118004",
      "url": "https://patchblox.com/security/cve/CVE-2026-118004",
      "title": "firefox-esr: Incorrect boundary conditions in the CSS Transitions and Animations component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117867",
      "url": "https://patchblox.com/security/cve/CVE-2026-117867",
      "title": "firefox-esr: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117870",
      "url": "https://patchblox.com/security/cve/CVE-2026-117870",
      "title": "firefox-esr: Use-after-free in the JavaScript Engine component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117879",
      "url": "https://patchblox.com/security/cve/CVE-2026-117879",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Tables component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117889",
      "url": "https://patchblox.com/security/cve/CVE-2026-117889",
      "title": "firefox-esr: Incorrect boundary conditions in the JavaScript Engine component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117897",
      "url": "https://patchblox.com/security/cve/CVE-2026-117897",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Tables component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117915",
      "url": "https://patchblox.com/security/cve/CVE-2026-117915",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Block and Inline component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117937",
      "url": "https://patchblox.com/security/cve/CVE-2026-117937",
      "title": "thunderbird: Invalid pointer in the JavaScript Engine component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117942",
      "url": "https://patchblox.com/security/cve/CVE-2026-117942",
      "title": "firefox-esr: Incorrect boundary conditions in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117866",
      "url": "https://patchblox.com/security/cve/CVE-2026-117866",
      "title": "firefox-esr: Privilege escalation due to use-after-free in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117891",
      "url": "https://patchblox.com/security/cve/CVE-2026-117891",
      "title": "firefox-esr: Use-after-free in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117892",
      "url": "https://patchblox.com/security/cve/CVE-2026-117892",
      "title": "firefox-esr: Privilege escalation due to use-after-free in the WebRTC: Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117959",
      "url": "https://patchblox.com/security/cve/CVE-2026-117959",
      "title": "firefox-esr: Site isolation issue in the DOM: Service Workers component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.4,
      "epss": 0.00343,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117871",
      "url": "https://patchblox.com/security/cve/CVE-2026-117871",
      "title": "firefox-esr: Invalid pointer in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00341,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117910",
      "url": "https://patchblox.com/security/cve/CVE-2026-117910",
      "title": "firefox-esr: Invalid pointer in the JavaScript Engine component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00341,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117890",
      "url": "https://patchblox.com/security/cve/CVE-2026-117890",
      "title": "firefox-esr: JIT miscompilation in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "high",
      "cvss": 7.3,
      "epss": 0.00341,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117903",
      "url": "https://patchblox.com/security/cve/CVE-2026-117903",
      "title": "firefox-esr: Use-after-free in the Audio/Video component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00313,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117970",
      "url": "https://patchblox.com/security/cve/CVE-2026-117970",
      "title": "firefox-esr: Race condition in the Disability Access APIs component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117999",
      "url": "https://patchblox.com/security/cve/CVE-2026-117999",
      "title": "firefox-esr: Race condition in the IPC component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117895",
      "url": "https://patchblox.com/security/cve/CVE-2026-117895",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117905",
      "url": "https://patchblox.com/security/cve/CVE-2026-117905",
      "title": "firefox-esr: Use-after-free in the Audio/Video: Playback component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117908",
      "url": "https://patchblox.com/security/cve/CVE-2026-117908",
      "title": "firefox-esr: Use-after-free in the Graphics: ImageLib component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117911",
      "url": "https://patchblox.com/security/cve/CVE-2026-117911",
      "title": "firefox-esr: Use-after-free in the Audio/Video: Playback component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117914",
      "url": "https://patchblox.com/security/cve/CVE-2026-117914",
      "title": "firefox-esr: Use-after-free in the SVG component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117923",
      "url": "https://patchblox.com/security/cve/CVE-2026-117923",
      "title": "firefox-esr: Use-after-free in the Audio/Video component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117924",
      "url": "https://patchblox.com/security/cve/CVE-2026-117924",
      "title": "firefox-esr: Use-after-free in the XSLT component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117934",
      "url": "https://patchblox.com/security/cve/CVE-2026-117934",
      "title": "thunderbird: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117938",
      "url": "https://patchblox.com/security/cve/CVE-2026-117938",
      "title": "thunderbird: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117939",
      "url": "https://patchblox.com/security/cve/CVE-2026-117939",
      "title": "firefox-esr: Use-after-free in the XML component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117944",
      "url": "https://patchblox.com/security/cve/CVE-2026-117944",
      "title": "firefox-esr: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117948",
      "url": "https://patchblox.com/security/cve/CVE-2026-117948",
      "title": "firefox-esr: Use-after-free in the SVG component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117874",
      "url": "https://patchblox.com/security/cve/CVE-2026-117874",
      "title": "firefox-esr: Use-after-free in the Internationalization component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117876",
      "url": "https://patchblox.com/security/cve/CVE-2026-117876",
      "title": "firefox-esr: Use-after-free in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117878",
      "url": "https://patchblox.com/security/cve/CVE-2026-117878",
      "title": "firefox-esr: Other issue, use-after-free in the Storage: IndexedDB component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117880",
      "url": "https://patchblox.com/security/cve/CVE-2026-117880",
      "title": "firefox-esr: Use-after-free in the XML component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117882",
      "url": "https://patchblox.com/security/cve/CVE-2026-117882",
      "title": "firefox-esr: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117896",
      "url": "https://patchblox.com/security/cve/CVE-2026-117896",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117906",
      "url": "https://patchblox.com/security/cve/CVE-2026-117906",
      "title": "firefox-esr: Use-after-free in the CSS Parsing and Computation component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117927",
      "url": "https://patchblox.com/security/cve/CVE-2026-117927",
      "title": "firefox-esr: Use-after-free in the SVG component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117935",
      "url": "https://patchblox.com/security/cve/CVE-2026-117935",
      "title": "thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117907",
      "url": "https://patchblox.com/security/cve/CVE-2026-117907",
      "title": "thunderbird: Use-after-free in the Networking component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117894",
      "url": "https://patchblox.com/security/cve/CVE-2026-117894",
      "title": "firefox-esr: Incorrect boundary conditions in the WebRTC: Signaling component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117888",
      "url": "https://patchblox.com/security/cve/CVE-2026-117888",
      "title": "firefox-esr: Uninitialized memory in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.4,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117909",
      "url": "https://patchblox.com/security/cve/CVE-2026-117909",
      "title": "firefox-esr: Use-after-free in the JavaScript: GC component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117947",
      "url": "https://patchblox.com/security/cve/CVE-2026-117947",
      "title": "firefox-esr: Use-after-free in the XML component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117865",
      "url": "https://patchblox.com/security/cve/CVE-2026-117865",
      "title": "thunderbird: Use-after-free in the JavaScript: GC component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117875",
      "url": "https://patchblox.com/security/cve/CVE-2026-117875",
      "title": "firefox-esr: Use-after-free in the Layout: Scrolling and Overflow component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117877",
      "url": "https://patchblox.com/security/cve/CVE-2026-117877",
      "title": "firefox-esr: Use-after-free in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117898",
      "url": "https://patchblox.com/security/cve/CVE-2026-117898",
      "title": "firefox-esr: Use-after-free in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117902",
      "url": "https://patchblox.com/security/cve/CVE-2026-117902",
      "title": "firefox-esr: Use-after-free in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117913",
      "url": "https://patchblox.com/security/cve/CVE-2026-117913",
      "title": "firefox-esr: Use-after-free in the SVG component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117916",
      "url": "https://patchblox.com/security/cve/CVE-2026-117916",
      "title": "firefox-esr: Use-after-free in the XSLT component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117957",
      "url": "https://patchblox.com/security/cve/CVE-2026-117957",
      "title": "firefox-esr: Cryptographic issue in the WebRTC: Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117912",
      "url": "https://patchblox.com/security/cve/CVE-2026-117912",
      "title": "firefox-esr: Same-origin policy bypass in the CSS Parsing and Computation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117860",
      "url": "https://patchblox.com/security/cve/CVE-2026-117860",
      "title": "firefox-esr: Same-origin policy bypass in the DOM: Navigation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117928",
      "url": "https://patchblox.com/security/cve/CVE-2026-117928",
      "title": "firefox-esr: Same-origin policy bypass in the CSS Parsing and Computation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117965",
      "url": "https://patchblox.com/security/cve/CVE-2026-117965",
      "title": "firefox-esr: Same-origin policy bypass in the Address Bar component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117966",
      "url": "https://patchblox.com/security/cve/CVE-2026-117966",
      "title": "firefox-esr: Site isolation issue in the Networking: HTTP component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.4,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117958",
      "url": "https://patchblox.com/security/cve/CVE-2026-117958",
      "title": "firefox-esr: Site isolation issue in the Networking: HTTP component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117976",
      "url": "https://patchblox.com/security/cve/CVE-2026-117976",
      "title": "thunderbird: Site isolation issue in the DOM: Navigation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117863",
      "url": "https://patchblox.com/security/cve/CVE-2026-117863",
      "title": "firefox-esr: Information disclosure due to uninitialized memory in the Audio/Video component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0039,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117992",
      "url": "https://patchblox.com/security/cve/CVE-2026-117992",
      "title": "firefox-esr: Information disclosure in the CSS Parsing and Computation component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0039,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117960",
      "url": "https://patchblox.com/security/cve/CVE-2026-117960",
      "title": "firefox-esr: Spoofing issue in the DOM: Core \u0026 HTML component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.00293,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117893",
      "url": "https://patchblox.com/security/cve/CVE-2026-117893",
      "title": "firefox-esr: Incorrect boundary conditions in the Security: PSM component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.4,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117933",
      "url": "https://patchblox.com/security/cve/CVE-2026-117933",
      "title": "thunderbird: Frame poisoning in the CSS Parsing and Computation component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117885",
      "url": "https://patchblox.com/security/cve/CVE-2026-117885",
      "title": "thunderbird: Use-after-free in the Layout: Grid component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.3,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}