{
  "fix": "SUSE-SU-2026:5145-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5145-1",
  "summary": "SUSE-SU-2026:5145-1, released November 7, 2026, fixes 147 CVEs in MozillaFirefox (version 153.6.0-150400.157.19.1). One of them is being exploited (CVE-2026-111497); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "MozillaFirefox security update",
  "released": "2026-11-07T00:42:08Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2026-111497, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 147,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.82641,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:5145-1",
  "appliesTo": [
    {
      "product": "MozillaFirefox",
      "productUrl": "https://patchblox.com/security/product/linux/mozillafirefox",
      "release": "sles 15.6",
      "fixedVersion": "153.6.0-150400.157.19.1",
      "supported": true
    },
    {
      "product": "MozillaFirefox",
      "productUrl": "https://patchblox.com/security/product/linux/mozillafirefox",
      "release": "sles 15.7",
      "fixedVersion": "153.6.0-150400.157.19.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-111497",
      "url": "https://patchblox.com/security/cve/CVE-2026-111497",
      "title": "Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.82641,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": true
    },
    {
      "cveId": "CVE-2026-117988",
      "url": "https://patchblox.com/security/cve/CVE-2026-117988",
      "title": "MozillaFirefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component.",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117990",
      "url": "https://patchblox.com/security/cve/CVE-2026-117990",
      "title": "MozillaFirefox: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117997",
      "url": "https://patchblox.com/security/cve/CVE-2026-117997",
      "title": "MozillaFirefox: Sandbox escape due to use-after-free in the Widget component.",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.6,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117862",
      "url": "https://patchblox.com/security/cve/CVE-2026-117862",
      "title": "MozillaFirefox: Privilege escalation due to incorrect boundary conditions in the Networking component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117917",
      "url": "https://patchblox.com/security/cve/CVE-2026-117917",
      "title": "MozillaFirefox: Invalid pointer in the Graphics: WebRender component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117946",
      "url": "https://patchblox.com/security/cve/CVE-2026-117946",
      "title": "MozillaFirefox: Incorrect boundary conditions in the JavaScript Engine component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00528,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117945",
      "url": "https://patchblox.com/security/cve/CVE-2026-117945",
      "title": "MozillaFirefox: Incorrect boundary conditions in the XML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00505,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117982",
      "url": "https://patchblox.com/security/cve/CVE-2026-117982",
      "title": "MozillaFirefox: Invalid pointer in the JavaScript Engine: JIT component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00505,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117980",
      "url": "https://patchblox.com/security/cve/CVE-2026-117980",
      "title": "MozillaFirefox: Use-after-free in the Graphics component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117981",
      "url": "https://patchblox.com/security/cve/CVE-2026-117981",
      "title": "MozillaFirefox: Privilege escalation in the Toolkit component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-113470",
      "url": "https://patchblox.com/security/cve/CVE-2026-113470",
      "title": "MozillaFirefox: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.1,
      "epss": 0.0046,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117925",
      "url": "https://patchblox.com/security/cve/CVE-2026-117925",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00433,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117967",
      "url": "https://patchblox.com/security/cve/CVE-2026-117967",
      "title": "MozillaFirefox: Mitigation bypass in the DOM: Security component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117998",
      "url": "https://patchblox.com/security/cve/CVE-2026-117998",
      "title": "MozillaFirefox: Mitigation bypass in the DOM: Push Subscriptions component.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0041,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117868",
      "url": "https://patchblox.com/security/cve/CVE-2026-117868",
      "title": "MozillaFirefox: Sandbox escape in the DOM: Networking component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.6,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117950",
      "url": "https://patchblox.com/security/cve/CVE-2026-117950",
      "title": "MozillaFirefox: Incorrect boundary conditions in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117979",
      "url": "https://patchblox.com/security/cve/CVE-2026-117979",
      "title": "MozillaFirefox: Incorrect boundary conditions in the Graphics: WebRender component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117971",
      "url": "https://patchblox.com/security/cve/CVE-2026-117971",
      "title": "MozillaFirefox: Sandbox escape due to use-after-free in the Print Preview component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.6,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117869",
      "url": "https://patchblox.com/security/cve/CVE-2026-117869",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117872",
      "url": "https://patchblox.com/security/cve/CVE-2026-117872",
      "title": "MozillaFirefox: Use-after-free in the JavaScript: Standard Library component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117881",
      "url": "https://patchblox.com/security/cve/CVE-2026-117881",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117883",
      "url": "https://patchblox.com/security/cve/CVE-2026-117883",
      "title": "MozillaFirefox: Use-after-free in the DOM: HTML Parser component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117884",
      "url": "https://patchblox.com/security/cve/CVE-2026-117884",
      "title": "MozillaFirefox: Use-after-free in the Networking component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117887",
      "url": "https://patchblox.com/security/cve/CVE-2026-117887",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117899",
      "url": "https://patchblox.com/security/cve/CVE-2026-117899",
      "title": "MozillaFirefox: Use-after-free in the Networking: HTTP component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117900",
      "url": "https://patchblox.com/security/cve/CVE-2026-117900",
      "title": "MozillaFirefox: Use-after-free in the DOM: Editor component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117901",
      "url": "https://patchblox.com/security/cve/CVE-2026-117901",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117918",
      "url": "https://patchblox.com/security/cve/CVE-2026-117918",
      "title": "MozillaFirefox: Use-after-free in the Graphics: Canvas2D component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117919",
      "url": "https://patchblox.com/security/cve/CVE-2026-117919",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117921",
      "url": "https://patchblox.com/security/cve/CVE-2026-117921",
      "title": "MozillaFirefox: Use-after-free in the CSS Parsing and Computation component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117922",
      "url": "https://patchblox.com/security/cve/CVE-2026-117922",
      "title": "MozillaFirefox: Use-after-free in the Networking: WebSockets component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117929",
      "url": "https://patchblox.com/security/cve/CVE-2026-117929",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117930",
      "url": "https://patchblox.com/security/cve/CVE-2026-117930",
      "title": "MozillaFirefox: Use-after-free in the DOM: Bindings (WebIDL) component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117931",
      "url": "https://patchblox.com/security/cve/CVE-2026-117931",
      "title": "thunderbird: Use-after-free in the DOM: Events component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117936",
      "url": "https://patchblox.com/security/cve/CVE-2026-117936",
      "title": "thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117941",
      "url": "https://patchblox.com/security/cve/CVE-2026-117941",
      "title": "firefox-esr: Use-after-free in the DOM: CSS Object Model component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117943",
      "url": "https://patchblox.com/security/cve/CVE-2026-117943",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117949",
      "url": "https://patchblox.com/security/cve/CVE-2026-117949",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117951",
      "url": "https://patchblox.com/security/cve/CVE-2026-117951",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117954",
      "url": "https://patchblox.com/security/cve/CVE-2026-117954",
      "title": "firefox-esr: Use-after-free in the Layout: Positioned component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117968",
      "url": "https://patchblox.com/security/cve/CVE-2026-117968",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117974",
      "url": "https://patchblox.com/security/cve/CVE-2026-117974",
      "title": "MozillaFirefox: Use-after-free in the XML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117861",
      "url": "https://patchblox.com/security/cve/CVE-2026-117861",
      "title": "MozillaFirefox: Sandbox escape in the DOM: Navigation component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117962",
      "url": "https://patchblox.com/security/cve/CVE-2026-117962",
      "title": "MozillaFirefox: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.6,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117864",
      "url": "https://patchblox.com/security/cve/CVE-2026-117864",
      "title": "MozillaFirefox: Sandbox escape in the Form Manager component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117956",
      "url": "https://patchblox.com/security/cve/CVE-2026-117956",
      "title": "MozillaFirefox: Invalid pointer in the Nimbus Desktop Client component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117969",
      "url": "https://patchblox.com/security/cve/CVE-2026-117969",
      "title": "MozillaFirefox: Invalid pointer in the JavaScript Engine: JIT component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117975",
      "url": "https://patchblox.com/security/cve/CVE-2026-117975",
      "title": "MozillaFirefox: Sandbox escape due to invalid pointer in the Graphics: WebRender component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117984",
      "url": "https://patchblox.com/security/cve/CVE-2026-117984",
      "title": "MozillaFirefox: Incorrect boundary conditions in the Layout: Scrolling and Overflow component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117991",
      "url": "https://patchblox.com/security/cve/CVE-2026-117991",
      "title": "MozillaFirefox: Incorrect boundary conditions in the Layout: Text and Fonts component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117993",
      "url": "https://patchblox.com/security/cve/CVE-2026-117993",
      "title": "MozillaFirefox: Integer overflow in the Graphics: Text component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00391,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117926",
      "url": "https://patchblox.com/security/cve/CVE-2026-117926",
      "title": "MozillaFirefox: Incorrect boundary conditions in the SVG component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117978",
      "url": "https://patchblox.com/security/cve/CVE-2026-117978",
      "title": "thunderbird: Incorrect boundary conditions in the Graphics component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117873",
      "url": "https://patchblox.com/security/cve/CVE-2026-117873",
      "title": "MozillaFirefox: Incorrect boundary conditions in the Audio/Video: Playback component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117886",
      "url": "https://patchblox.com/security/cve/CVE-2026-117886",
      "title": "MozillaFirefox: Incorrect boundary conditions in the Graphics: Text component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117952",
      "url": "https://patchblox.com/security/cve/CVE-2026-117952",
      "title": "MozillaFirefox: Uninitialized memory in the Networking component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117920",
      "url": "https://patchblox.com/security/cve/CVE-2026-117920",
      "title": "MozillaFirefox: Use-after-free in the DOM: HTML Parser component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.6,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117985",
      "url": "https://patchblox.com/security/cve/CVE-2026-117985",
      "title": "MozillaFirefox: Sandbox escape due to use-after-free in the Graphics component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.6,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117904",
      "url": "https://patchblox.com/security/cve/CVE-2026-117904",
      "title": "MozillaFirefox: Use-after-free in the JavaScript: GC component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117932",
      "url": "https://patchblox.com/security/cve/CVE-2026-117932",
      "title": "thunderbird: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117940",
      "url": "https://patchblox.com/security/cve/CVE-2026-117940",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117953",
      "url": "https://patchblox.com/security/cve/CVE-2026-117953",
      "title": "firefox-esr: Use-after-free in the DOM: Core \u0026 HTML component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117964",
      "url": "https://patchblox.com/security/cve/CVE-2026-117964",
      "title": "MozillaFirefox: Use-after-free in the Panning and Zooming component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117972",
      "url": "https://patchblox.com/security/cve/CVE-2026-117972",
      "title": "MozillaFirefox: Use-after-free in the Graphics component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117973",
      "url": "https://patchblox.com/security/cve/CVE-2026-117973",
      "title": "MozillaFirefox: Use-after-free in the Networking: DNS component.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117983",
      "url": "https://patchblox.com/security/cve/CVE-2026-117983",
      "title": "MozillaFirefox: Use-after-free in the Graphics component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117986",
      "url": "https://patchblox.com/security/cve/CVE-2026-117986",
      "title": "MozillaFirefox: Use-after-free in the Graphics component.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117987",
      "url": "https://patchblox.com/security/cve/CVE-2026-117987",
      "title": "MozillaFirefox: Use-after-free in the Graphics component.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117989",
      "url": "https://patchblox.com/security/cve/CVE-2026-117989",
      "title": "MozillaFirefox: Use-after-free in the Graphics component.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117994",
      "url": "https://patchblox.com/security/cve/CVE-2026-117994",
      "title": "MozillaFirefox: Use-after-free in the JavaScript: GC component.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118000",
      "url": "https://patchblox.com/security/cve/CVE-2026-118000",
      "title": "MozillaFirefox: Information disclosure in the Networking: HTTP component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118002",
      "url": "https://patchblox.com/security/cve/CVE-2026-118002",
      "title": "MozillaFirefox: Information disclosure due to race condition in the Networking component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118003",
      "url": "https://patchblox.com/security/cve/CVE-2026-118003",
      "title": "MozillaFirefox: Information disclosure in the Networking: DNS component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117955",
      "url": "https://patchblox.com/security/cve/CVE-2026-117955",
      "title": "MozillaFirefox: JIT miscompilation in the JavaScript: WebAssembly component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117995",
      "url": "https://patchblox.com/security/cve/CVE-2026-117995",
      "title": "MozillaFirefox: Privilege escalation in the DOM: UI Events \u0026 Focus Handling component.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117961",
      "url": "https://patchblox.com/security/cve/CVE-2026-117961",
      "title": "MozillaFirefox: Incorrect boundary conditions in the Layout: Text and Fonts component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117963",
      "url": "https://patchblox.com/security/cve/CVE-2026-117963",
      "title": "MozillaFirefox: Incorrect boundary conditions in the DOM: Service Workers component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117977",
      "url": "https://patchblox.com/security/cve/CVE-2026-117977",
      "title": "thunderbird: Other issue in the Console component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117996",
      "url": "https://patchblox.com/security/cve/CVE-2026-117996",
      "title": "MozillaFirefox: Incorrect boundary conditions in the WebRTC component.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-118004",
      "url": "https://patchblox.com/security/cve/CVE-2026-118004",
      "title": "MozillaFirefox: Incorrect boundary conditions in the CSS Transitions and Animations component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00362,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117867",
      "url": "https://patchblox.com/security/cve/CVE-2026-117867",
      "title": "MozillaFirefox: Use-after-free in the Layout component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117870",
      "url": "https://patchblox.com/security/cve/CVE-2026-117870",
      "title": "MozillaFirefox: Use-after-free in the JavaScript Engine component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117879",
      "url": "https://patchblox.com/security/cve/CVE-2026-117879",
      "title": "MozillaFirefox: Incorrect boundary conditions in the Layout: Tables component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117889",
      "url": "https://patchblox.com/security/cve/CVE-2026-117889",
      "title": "MozillaFirefox: Incorrect boundary conditions in the JavaScript Engine component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117897",
      "url": "https://patchblox.com/security/cve/CVE-2026-117897",
      "title": "MozillaFirefox: Incorrect boundary conditions in the Layout: Tables component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117915",
      "url": "https://patchblox.com/security/cve/CVE-2026-117915",
      "title": "MozillaFirefox: Incorrect boundary conditions in the Layout: Block and Inline component.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117937",
      "url": "https://patchblox.com/security/cve/CVE-2026-117937",
      "title": "thunderbird: Invalid pointer in the JavaScript Engine component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117942",
      "url": "https://patchblox.com/security/cve/CVE-2026-117942",
      "title": "firefox-esr: Incorrect boundary conditions in the JavaScript Engine: JIT component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117866",
      "url": "https://patchblox.com/security/cve/CVE-2026-117866",
      "title": "firefox-esr: Privilege escalation due to use-after-free in the Graphics: Canvas2D component",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117891",
      "url": "https://patchblox.com/security/cve/CVE-2026-117891",
      "title": "MozillaFirefox: Use-after-free in the JavaScript Engine: JIT component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117892",
      "url": "https://patchblox.com/security/cve/CVE-2026-117892",
      "title": "MozillaFirefox: Privilege escalation due to use-after-free in the WebRTC: Networking component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117959",
      "url": "https://patchblox.com/security/cve/CVE-2026-117959",
      "title": "MozillaFirefox: Site isolation issue in the DOM: Service Workers component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.4,
      "epss": 0.00343,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117871",
      "url": "https://patchblox.com/security/cve/CVE-2026-117871",
      "title": "MozillaFirefox: Invalid pointer in the Graphics component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00341,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117910",
      "url": "https://patchblox.com/security/cve/CVE-2026-117910",
      "title": "MozillaFirefox: Invalid pointer in the JavaScript Engine component.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00341,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117890",
      "url": "https://patchblox.com/security/cve/CVE-2026-117890",
      "title": "MozillaFirefox: JIT miscompilation in the JavaScript Engine: JIT component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.3,
      "epss": 0.00341,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117903",
      "url": "https://patchblox.com/security/cve/CVE-2026-117903",
      "title": "MozillaFirefox: Use-after-free in the Audio/Video component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00313,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117970",
      "url": "https://patchblox.com/security/cve/CVE-2026-117970",
      "title": "MozillaFirefox: Race condition in the Disability Access APIs component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117999",
      "url": "https://patchblox.com/security/cve/CVE-2026-117999",
      "title": "MozillaFirefox: Race condition in the IPC component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-100801",
      "url": "https://patchblox.com/security/cve/CVE-2026-100801",
      "title": "Privilege escalation in the DLL Services component",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00282,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117895",
      "url": "https://patchblox.com/security/cve/CVE-2026-117895",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117905",
      "url": "https://patchblox.com/security/cve/CVE-2026-117905",
      "title": "MozillaFirefox: Use-after-free in the Audio/Video: Playback component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117908",
      "url": "https://patchblox.com/security/cve/CVE-2026-117908",
      "title": "MozillaFirefox: Use-after-free in the Graphics: ImageLib component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117911",
      "url": "https://patchblox.com/security/cve/CVE-2026-117911",
      "title": "firefox-esr: Use-after-free in the Audio/Video: Playback component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117914",
      "url": "https://patchblox.com/security/cve/CVE-2026-117914",
      "title": "MozillaFirefox: Use-after-free in the SVG component.",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117923",
      "url": "https://patchblox.com/security/cve/CVE-2026-117923",
      "title": "MozillaFirefox: Use-after-free in the Audio/Video component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117924",
      "url": "https://patchblox.com/security/cve/CVE-2026-117924",
      "title": "MozillaFirefox: Use-after-free in the XSLT component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117934",
      "url": "https://patchblox.com/security/cve/CVE-2026-117934",
      "title": "thunderbird: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117938",
      "url": "https://patchblox.com/security/cve/CVE-2026-117938",
      "title": "thunderbird: Use-after-free in the Layout component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117939",
      "url": "https://patchblox.com/security/cve/CVE-2026-117939",
      "title": "MozillaFirefox: Use-after-free in the XML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117944",
      "url": "https://patchblox.com/security/cve/CVE-2026-117944",
      "title": "MozillaFirefox: Use-after-free in the Layout component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117948",
      "url": "https://patchblox.com/security/cve/CVE-2026-117948",
      "title": "MozillaFirefox: Use-after-free in the SVG component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117874",
      "url": "https://patchblox.com/security/cve/CVE-2026-117874",
      "title": "MozillaFirefox: Use-after-free in the Internationalization component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117876",
      "url": "https://patchblox.com/security/cve/CVE-2026-117876",
      "title": "MozillaFirefox: Use-after-free in the Layout: Text and Fonts component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117878",
      "url": "https://patchblox.com/security/cve/CVE-2026-117878",
      "title": "MozillaFirefox: Other issue, use-after-free in the Storage: IndexedDB component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117880",
      "url": "https://patchblox.com/security/cve/CVE-2026-117880",
      "title": "MozillaFirefox: Use-after-free in the XML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117882",
      "url": "https://patchblox.com/security/cve/CVE-2026-117882",
      "title": "MozillaFirefox: Use-after-free in the Layout component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117896",
      "url": "https://patchblox.com/security/cve/CVE-2026-117896",
      "title": "MozillaFirefox: Use-after-free in the DOM: Core \u0026 HTML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117906",
      "url": "https://patchblox.com/security/cve/CVE-2026-117906",
      "title": "MozillaFirefox: Use-after-free in the CSS Parsing and Computation component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117927",
      "url": "https://patchblox.com/security/cve/CVE-2026-117927",
      "title": "firefox-esr: Use-after-free in the SVG component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117935",
      "url": "https://patchblox.com/security/cve/CVE-2026-117935",
      "title": "MozillaFirefox: Use-after-free in the DOM: Bindings (WebIDL) component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117907",
      "url": "https://patchblox.com/security/cve/CVE-2026-117907",
      "title": "MozillaFirefox: Use-after-free in the Networking component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117894",
      "url": "https://patchblox.com/security/cve/CVE-2026-117894",
      "title": "MozillaFirefox: Incorrect boundary conditions in the WebRTC: Signaling component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117888",
      "url": "https://patchblox.com/security/cve/CVE-2026-117888",
      "title": "MozillaFirefox: Uninitialized memory in the Graphics: Canvas2D component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.4,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117909",
      "url": "https://patchblox.com/security/cve/CVE-2026-117909",
      "title": "firefox-esr: Use-after-free in the JavaScript: GC component",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117947",
      "url": "https://patchblox.com/security/cve/CVE-2026-117947",
      "title": "MozillaFirefox: Use-after-free in the XML component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117865",
      "url": "https://patchblox.com/security/cve/CVE-2026-117865",
      "title": "thunderbird: Use-after-free in the JavaScript: GC component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117875",
      "url": "https://patchblox.com/security/cve/CVE-2026-117875",
      "title": "MozillaFirefox: Use-after-free in the Layout: Scrolling and Overflow component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117877",
      "url": "https://patchblox.com/security/cve/CVE-2026-117877",
      "title": "MozillaFirefox: Use-after-free in the Layout: Text and Fonts component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117898",
      "url": "https://patchblox.com/security/cve/CVE-2026-117898",
      "title": "MozillaFirefox: Use-after-free in the JavaScript Engine: JIT component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117902",
      "url": "https://patchblox.com/security/cve/CVE-2026-117902",
      "title": "firefox-esr: Use-after-free in the Layout: Text and Fonts component",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117913",
      "url": "https://patchblox.com/security/cve/CVE-2026-117913",
      "title": "MozillaFirefox: Use-after-free in the SVG component.",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117916",
      "url": "https://patchblox.com/security/cve/CVE-2026-117916",
      "title": "MozillaFirefox: Use-after-free in the XSLT component.",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117957",
      "url": "https://patchblox.com/security/cve/CVE-2026-117957",
      "title": "MozillaFirefox: Cryptographic issue in the WebRTC: Networking component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117912",
      "url": "https://patchblox.com/security/cve/CVE-2026-117912",
      "title": "firefox-esr: Same-origin policy bypass in the CSS Parsing and Computation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117860",
      "url": "https://patchblox.com/security/cve/CVE-2026-117860",
      "title": "MozillaFirefox: Same-origin policy bypass in the DOM: Navigation component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117928",
      "url": "https://patchblox.com/security/cve/CVE-2026-117928",
      "title": "MozillaFirefox: Same-origin policy bypass in the CSS Parsing and Computation component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117965",
      "url": "https://patchblox.com/security/cve/CVE-2026-117965",
      "title": "MozillaFirefox: Same-origin policy bypass in the Address Bar component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117966",
      "url": "https://patchblox.com/security/cve/CVE-2026-117966",
      "title": "MozillaFirefox: Site isolation issue in the Networking: HTTP component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.4,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117958",
      "url": "https://patchblox.com/security/cve/CVE-2026-117958",
      "title": "MozillaFirefox: Site isolation issue in the Networking: HTTP component.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117976",
      "url": "https://patchblox.com/security/cve/CVE-2026-117976",
      "title": "thunderbird: Site isolation issue in the DOM: Navigation component",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117863",
      "url": "https://patchblox.com/security/cve/CVE-2026-117863",
      "title": "MozillaFirefox: Information disclosure due to uninitialized memory in the Audio/Video component.",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.0039,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117992",
      "url": "https://patchblox.com/security/cve/CVE-2026-117992",
      "title": "MozillaFirefox: Information disclosure in the CSS Parsing and Computation component.",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.0039,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117960",
      "url": "https://patchblox.com/security/cve/CVE-2026-117960",
      "title": "MozillaFirefox: Spoofing issue in the DOM: Core \u0026 HTML component.",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00293,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117893",
      "url": "https://patchblox.com/security/cve/CVE-2026-117893",
      "title": "MozillaFirefox: Incorrect boundary conditions in the Security: PSM component.",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.4,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117933",
      "url": "https://patchblox.com/security/cve/CVE-2026-117933",
      "title": "thunderbird: Frame poisoning in the CSS Parsing and Computation component",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00265,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-117885",
      "url": "https://patchblox.com/security/cve/CVE-2026-117885",
      "title": "MozillaFirefox: Use-after-free in the Layout: Grid component.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.3,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T07:45:43Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}