{
  "fix": "ELSA-2026-96081",
  "url": "https://patchblox.com/security/fix/linux/elsa-2026-96081",
  "summary": "ELSA-2026-96081, released November 10, 2026, fixes 154 CVEs in thunderbird (version 0:153.6.0-1.0.1.el9_8). None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "thunderbird security update",
  "released": "2026-11-10T03:32:09Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-117946, rated Critical",
  "supported": true,
  "cveCount": 154,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00528,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2026-96081.html",
  "appliesTo": [
    {
      "product": "thunderbird",
      "productUrl": "https://patchblox.com/security/product/linux/thunderbird",
      "release": "ol 9",
      "fixedVersion": "0:153.6.0-1.0.1.el9_8",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-117862",
      "url": "https://patchblox.com/security/cve/CVE-2026-117862",
      "title": "firefox-esr: Privilege escalation due to incorrect boundary conditions in the Networking component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117917",
      "url": "https://patchblox.com/security/cve/CVE-2026-117917",
      "title": "firefox-esr: Invalid pointer in the Graphics: WebRender component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117946",
      "url": "https://patchblox.com/security/cve/CVE-2026-117946",
      "title": "firefox-esr: Incorrect boundary conditions in the JavaScript Engine component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117945",
      "url": "https://patchblox.com/security/cve/CVE-2026-117945",
      "title": "firefox-esr: Incorrect boundary conditions in the XML component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00505,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117982",
      "url": "https://patchblox.com/security/cve/CVE-2026-117982",
      "title": "firefox-esr: Invalid pointer in the JavaScript Engine: JIT component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00505,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117980",
      "url": "https://patchblox.com/security/cve/CVE-2026-117980",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117981",
      "url": "https://patchblox.com/security/cve/CVE-2026-117981",
      "title": "firefox-esr: Privilege escalation in the Toolkit component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118177",
      "url": "https://patchblox.com/security/cve/CVE-2026-118177",
      "title": "thunderbird: When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Th...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00452,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117868",
      "url": "https://patchblox.com/security/cve/CVE-2026-117868",
      "title": "firefox-esr: Sandbox escape in the DOM: Networking component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117971",
      "url": "https://patchblox.com/security/cve/CVE-2026-117971",
      "title": "firefox-esr: Sandbox escape due to use-after-free in the Print Preview component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117861",
      "url": "https://patchblox.com/security/cve/CVE-2026-117861",
      "title": "firefox-esr: Sandbox escape in the DOM: Navigation component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117962",
      "url": "https://patchblox.com/security/cve/CVE-2026-117962",
      "title": "firefox-esr: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117988",
      "url": "https://patchblox.com/security/cve/CVE-2026-117988",
      "title": "firefox-esr: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117990",
      "url": "https://patchblox.com/security/cve/CVE-2026-117990",
      "title": "firefox-esr: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117920",
      "url": "https://patchblox.com/security/cve/CVE-2026-117920",
      "title": "firefox-esr: Use-after-free in the DOM: HTML Parser component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117985",
      "url": "https://patchblox.com/security/cve/CVE-2026-117985",
      "title": "firefox-esr: Sandbox escape due to use-after-free in the Graphics component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117997",
      "url": "https://patchblox.com/security/cve/CVE-2026-117997",
      "title": "firefox-esr: Sandbox escape due to use-after-free in the Widget component",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117925",
      "url": "https://patchblox.com/security/cve/CVE-2026-117925",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00433,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117967",
      "url": "https://patchblox.com/security/cve/CVE-2026-117967",
      "title": "firefox-esr: Mitigation bypass in the DOM: Security component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117998",
      "url": "https://patchblox.com/security/cve/CVE-2026-117998",
      "title": "firefox-esr: Mitigation bypass in the DOM: Push Subscriptions component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117950",
      "url": "https://patchblox.com/security/cve/CVE-2026-117950",
      "title": "firefox-esr: Incorrect boundary conditions in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117979",
      "url": "https://patchblox.com/security/cve/CVE-2026-117979",
      "title": "firefox-esr: Incorrect boundary conditions in the Graphics: WebRender component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93990",
      "url": "https://patchblox.com/security/cve/CVE-2026-93990",
      "title": "Expat through 2.8.4 Malformed UTF-16 Acceptance via Unchecked Surrogate",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118176",
      "url": "https://patchblox.com/security/cve/CVE-2026-118176",
      "title": "thunderbird: Thunderbird\u0027s check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypass...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118175",
      "url": "https://patchblox.com/security/cve/CVE-2026-118175",
      "title": "thunderbird: When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00399,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117869",
      "url": "https://patchblox.com/security/cve/CVE-2026-117869",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117872",
      "url": "https://patchblox.com/security/cve/CVE-2026-117872",
      "title": "firefox-esr: Use-after-free in the JavaScript: Standard Library component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117881",
      "url": "https://patchblox.com/security/cve/CVE-2026-117881",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117883",
      "url": "https://patchblox.com/security/cve/CVE-2026-117883",
      "title": "firefox-esr: Use-after-free in the DOM: HTML Parser component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117884",
      "url": "https://patchblox.com/security/cve/CVE-2026-117884",
      "title": "firefox-esr: Use-after-free in the Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117887",
      "url": "https://patchblox.com/security/cve/CVE-2026-117887",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117899",
      "url": "https://patchblox.com/security/cve/CVE-2026-117899",
      "title": "firefox-esr: Use-after-free in the Networking: HTTP component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117900",
      "url": "https://patchblox.com/security/cve/CVE-2026-117900",
      "title": "firefox-esr: Use-after-free in the DOM: Editor component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117901",
      "url": "https://patchblox.com/security/cve/CVE-2026-117901",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117918",
      "url": "https://patchblox.com/security/cve/CVE-2026-117918",
      "title": "firefox-esr: Use-after-free in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117919",
      "url": "https://patchblox.com/security/cve/CVE-2026-117919",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117921",
      "url": "https://patchblox.com/security/cve/CVE-2026-117921",
      "title": "firefox-esr: Use-after-free in the CSS Parsing and Computation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117922",
      "url": "https://patchblox.com/security/cve/CVE-2026-117922",
      "title": "firefox-esr: Use-after-free in the Networking: WebSockets component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117929",
      "url": "https://patchblox.com/security/cve/CVE-2026-117929",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117930",
      "url": "https://patchblox.com/security/cve/CVE-2026-117930",
      "title": "firefox-esr: Use-after-free in the DOM: Bindings (WebIDL) component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117931",
      "url": "https://patchblox.com/security/cve/CVE-2026-117931",
      "title": "thunderbird: Use-after-free in the DOM: Events component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117936",
      "url": "https://patchblox.com/security/cve/CVE-2026-117936",
      "title": "thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117941",
      "url": "https://patchblox.com/security/cve/CVE-2026-117941",
      "title": "firefox-esr: Use-after-free in the DOM: CSS Object Model component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117943",
      "url": "https://patchblox.com/security/cve/CVE-2026-117943",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117949",
      "url": "https://patchblox.com/security/cve/CVE-2026-117949",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117951",
      "url": "https://patchblox.com/security/cve/CVE-2026-117951",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117954",
      "url": "https://patchblox.com/security/cve/CVE-2026-117954",
      "title": "firefox-esr: Use-after-free in the Layout: Positioned component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117968",
      "url": "https://patchblox.com/security/cve/CVE-2026-117968",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117974",
      "url": "https://patchblox.com/security/cve/CVE-2026-117974",
      "title": "firefox-esr: Use-after-free in the XML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117864",
      "url": "https://patchblox.com/security/cve/CVE-2026-117864",
      "title": "firefox-esr: Sandbox escape in the Form Manager component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117956",
      "url": "https://patchblox.com/security/cve/CVE-2026-117956",
      "title": "firefox-esr: Invalid pointer in the Nimbus Desktop Client component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117969",
      "url": "https://patchblox.com/security/cve/CVE-2026-117969",
      "title": "firefox-esr: Invalid pointer in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117975",
      "url": "https://patchblox.com/security/cve/CVE-2026-117975",
      "title": "firefox-esr: Sandbox escape due to invalid pointer in the Graphics: WebRender component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117984",
      "url": "https://patchblox.com/security/cve/CVE-2026-117984",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Scrolling and Overflow component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117991",
      "url": "https://patchblox.com/security/cve/CVE-2026-117991",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117993",
      "url": "https://patchblox.com/security/cve/CVE-2026-117993",
      "title": "firefox-esr: Integer overflow in the Graphics: Text component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117926",
      "url": "https://patchblox.com/security/cve/CVE-2026-117926",
      "title": "firefox-esr: Incorrect boundary conditions in the SVG component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117978",
      "url": "https://patchblox.com/security/cve/CVE-2026-117978",
      "title": "thunderbird: Incorrect boundary conditions in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117873",
      "url": "https://patchblox.com/security/cve/CVE-2026-117873",
      "title": "firefox-esr: Incorrect boundary conditions in the Audio/Video: Playback component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117886",
      "url": "https://patchblox.com/security/cve/CVE-2026-117886",
      "title": "firefox-esr: Incorrect boundary conditions in the Graphics: Text component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117952",
      "url": "https://patchblox.com/security/cve/CVE-2026-117952",
      "title": "firefox-esr: Uninitialized memory in the Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117904",
      "url": "https://patchblox.com/security/cve/CVE-2026-117904",
      "title": "firefox-esr: Use-after-free in the JavaScript: GC component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117932",
      "url": "https://patchblox.com/security/cve/CVE-2026-117932",
      "title": "thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117940",
      "url": "https://patchblox.com/security/cve/CVE-2026-117940",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117953",
      "url": "https://patchblox.com/security/cve/CVE-2026-117953",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117964",
      "url": "https://patchblox.com/security/cve/CVE-2026-117964",
      "title": "firefox-esr: Use-after-free in the Panning and Zooming component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117972",
      "url": "https://patchblox.com/security/cve/CVE-2026-117972",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117973",
      "url": "https://patchblox.com/security/cve/CVE-2026-117973",
      "title": "firefox-esr: Use-after-free in the Networking: DNS component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117983",
      "url": "https://patchblox.com/security/cve/CVE-2026-117983",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117986",
      "url": "https://patchblox.com/security/cve/CVE-2026-117986",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117987",
      "url": "https://patchblox.com/security/cve/CVE-2026-117987",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117989",
      "url": "https://patchblox.com/security/cve/CVE-2026-117989",
      "title": "firefox-esr: Use-after-free in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117994",
      "url": "https://patchblox.com/security/cve/CVE-2026-117994",
      "title": "thunderbird: Use-after-free in the JavaScript: GC component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118179",
      "url": "https://patchblox.com/security/cve/CVE-2026-118179",
      "title": "thunderbird: Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host an...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00378,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118174",
      "url": "https://patchblox.com/security/cve/CVE-2026-118174",
      "title": "thunderbird: When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment\u0027s...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00372,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118000",
      "url": "https://patchblox.com/security/cve/CVE-2026-118000",
      "title": "firefox-esr: Information disclosure in the Networking: HTTP component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118002",
      "url": "https://patchblox.com/security/cve/CVE-2026-118002",
      "title": "firefox-esr: Information disclosure due to race condition in the Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118003",
      "url": "https://patchblox.com/security/cve/CVE-2026-118003",
      "title": "firefox-esr: Information disclosure in the Networking: DNS component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117955",
      "url": "https://patchblox.com/security/cve/CVE-2026-117955",
      "title": "firefox-esr: JIT miscompilation in the JavaScript: WebAssembly component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117995",
      "url": "https://patchblox.com/security/cve/CVE-2026-117995",
      "title": "firefox-esr: Privilege escalation in the DOM: UI Events \u0026 Focus Handling component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117961",
      "url": "https://patchblox.com/security/cve/CVE-2026-117961",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117963",
      "url": "https://patchblox.com/security/cve/CVE-2026-117963",
      "title": "firefox-esr: Incorrect boundary conditions in the DOM: Service Workers component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117977",
      "url": "https://patchblox.com/security/cve/CVE-2026-117977",
      "title": "thunderbird: Other issue in the Console component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117996",
      "url": "https://patchblox.com/security/cve/CVE-2026-117996",
      "title": "firefox-esr: Incorrect boundary conditions in the WebRTC component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118004",
      "url": "https://patchblox.com/security/cve/CVE-2026-118004",
      "title": "firefox-esr: Incorrect boundary conditions in the CSS Transitions and Animations component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117867",
      "url": "https://patchblox.com/security/cve/CVE-2026-117867",
      "title": "firefox-esr: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117870",
      "url": "https://patchblox.com/security/cve/CVE-2026-117870",
      "title": "firefox-esr: Use-after-free in the JavaScript Engine component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117879",
      "url": "https://patchblox.com/security/cve/CVE-2026-117879",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Tables component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117889",
      "url": "https://patchblox.com/security/cve/CVE-2026-117889",
      "title": "firefox-esr: Incorrect boundary conditions in the JavaScript Engine component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117897",
      "url": "https://patchblox.com/security/cve/CVE-2026-117897",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Tables component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117915",
      "url": "https://patchblox.com/security/cve/CVE-2026-117915",
      "title": "firefox-esr: Incorrect boundary conditions in the Layout: Block and Inline component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117937",
      "url": "https://patchblox.com/security/cve/CVE-2026-117937",
      "title": "thunderbird: Invalid pointer in the JavaScript Engine component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117942",
      "url": "https://patchblox.com/security/cve/CVE-2026-117942",
      "title": "firefox-esr: Incorrect boundary conditions in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117866",
      "url": "https://patchblox.com/security/cve/CVE-2026-117866",
      "title": "firefox-esr: Privilege escalation due to use-after-free in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117891",
      "url": "https://patchblox.com/security/cve/CVE-2026-117891",
      "title": "firefox-esr: Use-after-free in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117892",
      "url": "https://patchblox.com/security/cve/CVE-2026-117892",
      "title": "firefox-esr: Privilege escalation due to use-after-free in the WebRTC: Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117959",
      "url": "https://patchblox.com/security/cve/CVE-2026-117959",
      "title": "firefox-esr: Site isolation issue in the DOM: Service Workers component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.4,
      "epss": 0.00343,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117871",
      "url": "https://patchblox.com/security/cve/CVE-2026-117871",
      "title": "firefox-esr: Invalid pointer in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00341,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117910",
      "url": "https://patchblox.com/security/cve/CVE-2026-117910",
      "title": "firefox-esr: Invalid pointer in the JavaScript Engine component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00341,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117890",
      "url": "https://patchblox.com/security/cve/CVE-2026-117890",
      "title": "firefox-esr: JIT miscompilation in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "high",
      "cvss": 7.3,
      "epss": 0.00341,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118180",
      "url": "https://patchblox.com/security/cve/CVE-2026-118180",
      "title": "thunderbird: When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server\u0027s login response...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00324,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118178",
      "url": "https://patchblox.com/security/cve/CVE-2026-118178",
      "title": "thunderbird: A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscript...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117903",
      "url": "https://patchblox.com/security/cve/CVE-2026-117903",
      "title": "firefox-esr: Use-after-free in the Audio/Video component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00313,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117970",
      "url": "https://patchblox.com/security/cve/CVE-2026-117970",
      "title": "firefox-esr: Race condition in the Disability Access APIs component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117999",
      "url": "https://patchblox.com/security/cve/CVE-2026-117999",
      "title": "firefox-esr: Race condition in the IPC component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117895",
      "url": "https://patchblox.com/security/cve/CVE-2026-117895",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117905",
      "url": "https://patchblox.com/security/cve/CVE-2026-117905",
      "title": "firefox-esr: Use-after-free in the Audio/Video: Playback component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117908",
      "url": "https://patchblox.com/security/cve/CVE-2026-117908",
      "title": "firefox-esr: Use-after-free in the Graphics: ImageLib component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117911",
      "url": "https://patchblox.com/security/cve/CVE-2026-117911",
      "title": "firefox-esr: Use-after-free in the Audio/Video: Playback component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117914",
      "url": "https://patchblox.com/security/cve/CVE-2026-117914",
      "title": "firefox-esr: Use-after-free in the SVG component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117923",
      "url": "https://patchblox.com/security/cve/CVE-2026-117923",
      "title": "firefox-esr: Use-after-free in the Audio/Video component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117924",
      "url": "https://patchblox.com/security/cve/CVE-2026-117924",
      "title": "firefox-esr: Use-after-free in the XSLT component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117934",
      "url": "https://patchblox.com/security/cve/CVE-2026-117934",
      "title": "thunderbird: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117938",
      "url": "https://patchblox.com/security/cve/CVE-2026-117938",
      "title": "thunderbird: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117939",
      "url": "https://patchblox.com/security/cve/CVE-2026-117939",
      "title": "firefox-esr: Use-after-free in the XML component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117944",
      "url": "https://patchblox.com/security/cve/CVE-2026-117944",
      "title": "firefox-esr: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117948",
      "url": "https://patchblox.com/security/cve/CVE-2026-117948",
      "title": "firefox-esr: Use-after-free in the SVG component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117874",
      "url": "https://patchblox.com/security/cve/CVE-2026-117874",
      "title": "firefox-esr: Use-after-free in the Internationalization component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117876",
      "url": "https://patchblox.com/security/cve/CVE-2026-117876",
      "title": "firefox-esr: Use-after-free in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117878",
      "url": "https://patchblox.com/security/cve/CVE-2026-117878",
      "title": "firefox-esr: Other issue, use-after-free in the Storage: IndexedDB component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117880",
      "url": "https://patchblox.com/security/cve/CVE-2026-117880",
      "title": "firefox-esr: Use-after-free in the XML component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117882",
      "url": "https://patchblox.com/security/cve/CVE-2026-117882",
      "title": "firefox-esr: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117896",
      "url": "https://patchblox.com/security/cve/CVE-2026-117896",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117906",
      "url": "https://patchblox.com/security/cve/CVE-2026-117906",
      "title": "firefox-esr: Use-after-free in the CSS Parsing and Computation component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117927",
      "url": "https://patchblox.com/security/cve/CVE-2026-117927",
      "title": "firefox-esr: Use-after-free in the SVG component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117935",
      "url": "https://patchblox.com/security/cve/CVE-2026-117935",
      "title": "thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117907",
      "url": "https://patchblox.com/security/cve/CVE-2026-117907",
      "title": "thunderbird: Use-after-free in the Networking component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117894",
      "url": "https://patchblox.com/security/cve/CVE-2026-117894",
      "title": "firefox-esr: Incorrect boundary conditions in the WebRTC: Signaling component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117888",
      "url": "https://patchblox.com/security/cve/CVE-2026-117888",
      "title": "firefox-esr: Uninitialized memory in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.4,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117909",
      "url": "https://patchblox.com/security/cve/CVE-2026-117909",
      "title": "firefox-esr: Use-after-free in the JavaScript: GC component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117947",
      "url": "https://patchblox.com/security/cve/CVE-2026-117947",
      "title": "firefox-esr: Use-after-free in the XML component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117865",
      "url": "https://patchblox.com/security/cve/CVE-2026-117865",
      "title": "thunderbird: Use-after-free in the JavaScript: GC component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117875",
      "url": "https://patchblox.com/security/cve/CVE-2026-117875",
      "title": "firefox-esr: Use-after-free in the Layout: Scrolling and Overflow component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117877",
      "url": "https://patchblox.com/security/cve/CVE-2026-117877",
      "title": "firefox-esr: Use-after-free in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117898",
      "url": "https://patchblox.com/security/cve/CVE-2026-117898",
      "title": "firefox-esr: Use-after-free in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117902",
      "url": "https://patchblox.com/security/cve/CVE-2026-117902",
      "title": "firefox-esr: Use-after-free in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117913",
      "url": "https://patchblox.com/security/cve/CVE-2026-117913",
      "title": "firefox-esr: Use-after-free in the SVG component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117916",
      "url": "https://patchblox.com/security/cve/CVE-2026-117916",
      "title": "firefox-esr: Use-after-free in the XSLT component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117957",
      "url": "https://patchblox.com/security/cve/CVE-2026-117957",
      "title": "firefox-esr: Cryptographic issue in the WebRTC: Networking component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117912",
      "url": "https://patchblox.com/security/cve/CVE-2026-117912",
      "title": "firefox-esr: Same-origin policy bypass in the CSS Parsing and Computation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117860",
      "url": "https://patchblox.com/security/cve/CVE-2026-117860",
      "title": "firefox-esr: Same-origin policy bypass in the DOM: Navigation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117928",
      "url": "https://patchblox.com/security/cve/CVE-2026-117928",
      "title": "firefox-esr: Same-origin policy bypass in the CSS Parsing and Computation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117965",
      "url": "https://patchblox.com/security/cve/CVE-2026-117965",
      "title": "firefox-esr: Same-origin policy bypass in the Address Bar component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117966",
      "url": "https://patchblox.com/security/cve/CVE-2026-117966",
      "title": "firefox-esr: Site isolation issue in the Networking: HTTP component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.4,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117958",
      "url": "https://patchblox.com/security/cve/CVE-2026-117958",
      "title": "firefox-esr: Site isolation issue in the Networking: HTTP component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117976",
      "url": "https://patchblox.com/security/cve/CVE-2026-117976",
      "title": "thunderbird: Site isolation issue in the DOM: Navigation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117863",
      "url": "https://patchblox.com/security/cve/CVE-2026-117863",
      "title": "firefox-esr: Information disclosure due to uninitialized memory in the Audio/Video component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0039,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117992",
      "url": "https://patchblox.com/security/cve/CVE-2026-117992",
      "title": "firefox-esr: Information disclosure in the CSS Parsing and Computation component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.0039,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-113869",
      "url": "https://patchblox.com/security/cve/CVE-2026-113869",
      "title": "thunderbird: [153.6.0-1.0.1]\n- Fix prefs for new nss [Orabug: 37079813]\n- Add Oracle prefs\n\n[153.6.0]\n- Add OpenELA debranding\n\n[1...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.0033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117960",
      "url": "https://patchblox.com/security/cve/CVE-2026-117960",
      "title": "firefox-esr: Spoofing issue in the DOM: Core \u0026 HTML component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.00293,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117893",
      "url": "https://patchblox.com/security/cve/CVE-2026-117893",
      "title": "firefox-esr: Incorrect boundary conditions in the Security: PSM component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.4,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117933",
      "url": "https://patchblox.com/security/cve/CVE-2026-117933",
      "title": "thunderbird: Frame poisoning in the CSS Parsing and Computation component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117885",
      "url": "https://patchblox.com/security/cve/CVE-2026-117885",
      "title": "thunderbird: Use-after-free in the Layout: Grid component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.3,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-110247",
      "url": "https://patchblox.com/security/cve/CVE-2026-110247",
      "title": "thunderbird: [153.6.0-1.0.1]\n- Fix prefs for new nss [Orabug: 37079813]\n- Add Oracle prefs\n\n[153.6.0]\n- Add OpenELA debranding\n\n[1...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T07:50:38Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}