ALSA-2026:99112 (CVE-2026-118007)

Vulnerability from osv_almalinux – Published: 2026-11-11 00:00 – Updated: 2026-11-12 21:34 – Source website
VLAI
Summary
Important: firefox security update
Details

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

  • firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-118007)
  • firefox: thunderbird: Sandbox escape due to use-after-free in the XPCOM component (CVE-2026-118021)
  • firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-118024)
  • firefox: thunderbird: Race condition, use-after-free in the DOM: File component (CVE-2026-118019)
  • firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-124860)
  • firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-124914)
  • firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124869)
  • firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-124854)
  • firefox: thunderbird: Use-after-free in the Layout: Positioned component (CVE-2026-124877)
  • firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-124917)
  • firefox: thunderbird: Incorrect boundary conditions in the DOM: Selection component (CVE-2026-124891)
  • firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-124857)
  • firefox: thunderbird: Information disclosure in the Security: RLBox component (CVE-2026-124941)
  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-124855)
  • firefox: thunderbird: Spoofing issue in the Security component (CVE-2026-124934)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component (CVE-2026-124853)
  • firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-124905)
  • firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component (CVE-2026-124859)
  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124881)
  • firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124862)
  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124882)
  • firefox: thunderbird: Information disclosure in the Private Browsing component (CVE-2026-124909)
  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124876)
  • firefox: thunderbird: Use-after-free in the DOM: Workers component (CVE-2026-124893)
  • firefox: thunderbird: Use-after-free in the Graphics: WebRender component (CVE-2026-124906)
  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-124887)
  • firefox: thunderbird: Mitigation bypass in the WebExtensions component (CVE-2026-124910)
  • firefox: thunderbird: Privilege escalation in the Nimbus Desktop Client component (CVE-2026-124951)
  • firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-124865)
  • firefox: thunderbird: Incorrect boundary conditions, use-after-free in the Graphics component (CVE-2026-124948)
  • firefox: thunderbird: Undefined behavior in the WebRTC: Networking component (CVE-2026-124935)
  • firefox: thunderbird: Incorrect boundary conditions in the DOM: CSS Object Model component (CVE-2026-124875)
  • firefox: thunderbird: Sandbox escape due to use-after-free in the IPC component (CVE-2026-124903)
  • firefox: thunderbird: Incorrect boundary conditions in the Networking: HTTP component (CVE-2026-124856)
  • firefox: thunderbird: Use-after-free in the Networking: Cookies component (CVE-2026-124894)
  • firefox: thunderbird: Use-after-free in the Storage: localStorage & sessionStorage component (CVE-2026-124895)
  • firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-124885)
  • firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-124899)
  • firefox: thunderbird: Sandbox escape in the Console component (CVE-2026-124933)
  • firefox: thunderbird: Use-after-free in the Layout component (CVE-2026-124866)
  • firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124883)
  • firefox: thunderbird: Information disclosure in the Layout: Form Controls component (CVE-2026-124929)
  • firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2026-124870)
  • firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-124927)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component (CVE-2026-124915)
  • firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124890)
  • firefox: thunderbird: Information disclosure in the Address Bar component (CVE-2026-124930)
  • firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component (CVE-2026-124886)
  • firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-124858)
  • firefox: thunderbird: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component (CVE-2026-124907)
  • firefox: thunderbird: Invalid pointer in the DOM: Editor component (CVE-2026-124873)
  • firefox: thunderbird: Spoofing issue in the DOM: Security component (CVE-2026-124912)
  • firefox: thunderbird: Same-origin policy bypass in the Networking: HTTP component (CVE-2026-124874)
  • firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124892)
  • firefox: thunderbird: Invalid pointer in the DOM: Streams component (CVE-2026-124942)
  • firefox: thunderbird: Use-after-free in the CSS Transitions and Animations component (CVE-2026-124922)
  • firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-124918)
  • firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124884)
  • firefox: thunderbird: Incorrect boundary conditions in the DOM: Core & HTML component (CVE-2026-124868)
  • firefox: thunderbird: Privilege escalation due to use-after-free in the WebRTC: Networking component (CVE-2026-124919)
  • firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-124924)
  • firefox: thunderbird: Same-origin policy bypass due to race condition in the Audio/Video component (CVE-2026-124902)
  • firefox: thunderbird: Invalid pointer in the Networking: Cache component (CVE-2026-124879)
  • firefox: thunderbird: Use-after-free in the Graphics component (CVE-2026-124932)
  • firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-124940)
  • firefox: thunderbird: Same-origin policy bypass in the DOM: Core & HTML component (CVE-2026-124931)
  • firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-124926)
  • firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-124863)
  • firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124889)
  • firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-124913)
  • firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124897)
  • firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Service Workers component (CVE-2026-124864)
  • firefox: thunderbird: Use-after-free in the Cycle Collector component (CVE-2026-124872)
  • firefox: thunderbird: Use-after-free in the DOM: Core & HTML component (CVE-2026-124880)
  • firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component (CVE-2026-124896)
  • firefox: thunderbird: Other issue in the Networking: JAR component (CVE-2026-124901)
  • firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-124888)
  • firefox: thunderbird: Mitigation bypass in the Add-ons Manager component (CVE-2026-124938)
  • firefox: thunderbird: Sandbox escape due to use-after-free in the Audio/Video: cubeb component (CVE-2026-124861)
  • firefox: thunderbird: Use-after-free in the DOM: Editor component (CVE-2026-124898)
  • firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-124939)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References
https://access.redhat.com/errata/RHSA-2026:99112 ADVISORY
https://access.redhat.com/security/cve/CVE-2026-118007 REPORT
https://access.redhat.com/security/cve/CVE-2026-118019 REPORT
https://access.redhat.com/security/cve/CVE-2026-118021 REPORT
https://access.redhat.com/security/cve/CVE-2026-118024 REPORT
https://access.redhat.com/security/cve/CVE-2026-124853 REPORT
https://access.redhat.com/security/cve/CVE-2026-124854 REPORT
https://access.redhat.com/security/cve/CVE-2026-124855 REPORT
https://access.redhat.com/security/cve/CVE-2026-124856 REPORT
https://access.redhat.com/security/cve/CVE-2026-124857 REPORT
https://access.redhat.com/security/cve/CVE-2026-124858 REPORT
https://access.redhat.com/security/cve/CVE-2026-124859 REPORT
https://access.redhat.com/security/cve/CVE-2026-124860 REPORT
https://access.redhat.com/security/cve/CVE-2026-124861 REPORT
https://access.redhat.com/security/cve/CVE-2026-124862 REPORT
https://access.redhat.com/security/cve/CVE-2026-124863 REPORT
https://access.redhat.com/security/cve/CVE-2026-124864 REPORT
https://access.redhat.com/security/cve/CVE-2026-124865 REPORT
https://access.redhat.com/security/cve/CVE-2026-124866 REPORT
https://access.redhat.com/security/cve/CVE-2026-124868 REPORT
https://access.redhat.com/security/cve/CVE-2026-124869 REPORT
https://access.redhat.com/security/cve/CVE-2026-124870 REPORT
https://access.redhat.com/security/cve/CVE-2026-124872 REPORT
https://access.redhat.com/security/cve/CVE-2026-124873 REPORT
https://access.redhat.com/security/cve/CVE-2026-124874 REPORT
https://access.redhat.com/security/cve/CVE-2026-124875 REPORT
https://access.redhat.com/security/cve/CVE-2026-124876 REPORT
https://access.redhat.com/security/cve/CVE-2026-124877 REPORT
https://access.redhat.com/security/cve/CVE-2026-124879 REPORT
https://access.redhat.com/security/cve/CVE-2026-124880 REPORT
https://access.redhat.com/security/cve/CVE-2026-124881 REPORT
https://access.redhat.com/security/cve/CVE-2026-124882 REPORT
https://access.redhat.com/security/cve/CVE-2026-124883 REPORT
https://access.redhat.com/security/cve/CVE-2026-124884 REPORT
https://access.redhat.com/security/cve/CVE-2026-124885 REPORT
https://access.redhat.com/security/cve/CVE-2026-124886 REPORT
https://access.redhat.com/security/cve/CVE-2026-124887 REPORT
https://access.redhat.com/security/cve/CVE-2026-124888 REPORT
https://access.redhat.com/security/cve/CVE-2026-124889 REPORT
https://access.redhat.com/security/cve/CVE-2026-124890 REPORT
https://access.redhat.com/security/cve/CVE-2026-124891 REPORT
https://access.redhat.com/security/cve/CVE-2026-124892 REPORT
https://access.redhat.com/security/cve/CVE-2026-124893 REPORT
https://access.redhat.com/security/cve/CVE-2026-124894 REPORT
https://access.redhat.com/security/cve/CVE-2026-124895 REPORT
https://access.redhat.com/security/cve/CVE-2026-124896 REPORT
https://access.redhat.com/security/cve/CVE-2026-124897 REPORT
https://access.redhat.com/security/cve/CVE-2026-124898 REPORT
https://access.redhat.com/security/cve/CVE-2026-124899 REPORT
https://access.redhat.com/security/cve/CVE-2026-124901 REPORT
https://access.redhat.com/security/cve/CVE-2026-124902 REPORT
https://access.redhat.com/security/cve/CVE-2026-124903 REPORT
https://access.redhat.com/security/cve/CVE-2026-124905 REPORT
https://access.redhat.com/security/cve/CVE-2026-124906 REPORT
https://access.redhat.com/security/cve/CVE-2026-124907 REPORT
https://access.redhat.com/security/cve/CVE-2026-124909 REPORT
https://access.redhat.com/security/cve/CVE-2026-124910 REPORT
https://access.redhat.com/security/cve/CVE-2026-124912 REPORT
https://access.redhat.com/security/cve/CVE-2026-124913 REPORT
https://access.redhat.com/security/cve/CVE-2026-124914 REPORT
https://access.redhat.com/security/cve/CVE-2026-124915 REPORT
https://access.redhat.com/security/cve/CVE-2026-124917 REPORT
https://access.redhat.com/security/cve/CVE-2026-124918 REPORT
https://access.redhat.com/security/cve/CVE-2026-124919 REPORT
https://access.redhat.com/security/cve/CVE-2026-124922 REPORT
https://access.redhat.com/security/cve/CVE-2026-124924 REPORT
https://access.redhat.com/security/cve/CVE-2026-124926 REPORT
https://access.redhat.com/security/cve/CVE-2026-124927 REPORT
https://access.redhat.com/security/cve/CVE-2026-124929 REPORT
https://access.redhat.com/security/cve/CVE-2026-124930 REPORT
https://access.redhat.com/security/cve/CVE-2026-124931 REPORT
https://access.redhat.com/security/cve/CVE-2026-124932 REPORT
https://access.redhat.com/security/cve/CVE-2026-124933 REPORT
https://access.redhat.com/security/cve/CVE-2026-124934 REPORT
https://access.redhat.com/security/cve/CVE-2026-124935 REPORT
https://access.redhat.com/security/cve/CVE-2026-124938 REPORT
https://access.redhat.com/security/cve/CVE-2026-124939 REPORT
https://access.redhat.com/security/cve/CVE-2026-124940 REPORT
https://access.redhat.com/security/cve/CVE-2026-124941 REPORT
https://access.redhat.com/security/cve/CVE-2026-124942 REPORT
https://access.redhat.com/security/cve/CVE-2026-124948 REPORT
https://access.redhat.com/security/cve/CVE-2026-124951 REPORT
https://bugzilla.redhat.com/2562015 REPORT
https://bugzilla.redhat.com/2562042 REPORT
https://bugzilla.redhat.com/2562122 REPORT
https://bugzilla.redhat.com/2562259 REPORT
https://bugzilla.redhat.com/2569830 REPORT
https://bugzilla.redhat.com/2569846 REPORT
https://bugzilla.redhat.com/2569877 REPORT
https://bugzilla.redhat.com/2569907 REPORT
https://bugzilla.redhat.com/2569955 REPORT
https://bugzilla.redhat.com/2569957 REPORT
https://bugzilla.redhat.com/2569970 REPORT
https://bugzilla.redhat.com/2569978 REPORT
https://bugzilla.redhat.com/2569982 REPORT
https://bugzilla.redhat.com/2569985 REPORT
https://bugzilla.redhat.com/2569994 REPORT
https://bugzilla.redhat.com/2570012 REPORT
https://bugzilla.redhat.com/2570014 REPORT
https://bugzilla.redhat.com/2570100 REPORT
https://bugzilla.redhat.com/2570107 REPORT
https://bugzilla.redhat.com/2570116 REPORT
https://bugzilla.redhat.com/2570127 REPORT
https://bugzilla.redhat.com/2570137 REPORT
https://bugzilla.redhat.com/2570140 REPORT
https://bugzilla.redhat.com/2570149 REPORT
https://bugzilla.redhat.com/2570165 REPORT
https://bugzilla.redhat.com/2570172 REPORT
https://bugzilla.redhat.com/2570208 REPORT
https://bugzilla.redhat.com/2570241 REPORT
https://bugzilla.redhat.com/2570248 REPORT
https://bugzilla.redhat.com/2570255 REPORT
https://bugzilla.redhat.com/2570306 REPORT
https://bugzilla.redhat.com/2570334 REPORT
https://bugzilla.redhat.com/2570365 REPORT
https://bugzilla.redhat.com/2570417 REPORT
https://bugzilla.redhat.com/2570433 REPORT
https://bugzilla.redhat.com/2570440 REPORT
https://bugzilla.redhat.com/2570491 REPORT
https://bugzilla.redhat.com/2570514 REPORT
https://bugzilla.redhat.com/2570521 REPORT
https://bugzilla.redhat.com/2570548 REPORT
https://bugzilla.redhat.com/2570574 REPORT
https://bugzilla.redhat.com/2570589 REPORT
https://bugzilla.redhat.com/2570601 REPORT
https://bugzilla.redhat.com/2570629 REPORT
https://bugzilla.redhat.com/2570636 REPORT
https://bugzilla.redhat.com/2570644 REPORT
https://bugzilla.redhat.com/2570655 REPORT
https://bugzilla.redhat.com/2570660 REPORT
https://bugzilla.redhat.com/2570662 REPORT
https://bugzilla.redhat.com/2570664 REPORT
https://bugzilla.redhat.com/2570686 REPORT
https://bugzilla.redhat.com/2570704 REPORT
https://bugzilla.redhat.com/2570705 REPORT
https://bugzilla.redhat.com/2570717 REPORT
https://bugzilla.redhat.com/2570726 REPORT
https://bugzilla.redhat.com/2570740 REPORT
https://bugzilla.redhat.com/2570753 REPORT
https://bugzilla.redhat.com/2570755 REPORT
https://bugzilla.redhat.com/2570770 REPORT
https://bugzilla.redhat.com/2570787 REPORT
https://bugzilla.redhat.com/2570811 REPORT
https://bugzilla.redhat.com/2570824 REPORT
https://bugzilla.redhat.com/2570865 REPORT
https://bugzilla.redhat.com/2570876 REPORT
https://bugzilla.redhat.com/2570896 REPORT
https://bugzilla.redhat.com/2570942 REPORT
https://bugzilla.redhat.com/2570955 REPORT
https://bugzilla.redhat.com/2571008 REPORT
https://bugzilla.redhat.com/2571031 REPORT
https://bugzilla.redhat.com/2571052 REPORT
https://bugzilla.redhat.com/2571076 REPORT
https://bugzilla.redhat.com/2571102 REPORT
https://bugzilla.redhat.com/2571104 REPORT
https://bugzilla.redhat.com/2571112 REPORT
https://bugzilla.redhat.com/2571117 REPORT
https://bugzilla.redhat.com/2571125 REPORT
https://bugzilla.redhat.com/2571126 REPORT
https://bugzilla.redhat.com/2571146 REPORT
https://bugzilla.redhat.com/2571152 REPORT
https://bugzilla.redhat.com/2571158 REPORT
https://bugzilla.redhat.com/2571162 REPORT
https://errata.almalinux.org/8/ALSA-2026-99112.html ADVISORY
To clipboard 

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "firefox"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "153.7.0-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-118007)\n  * firefox: thunderbird: Sandbox escape due to use-after-free in the XPCOM component (CVE-2026-118021)\n  * firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-118024)\n  * firefox: thunderbird: Race condition, use-after-free in the DOM: File component (CVE-2026-118019)\n  * firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-124860)\n  * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-124914)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-124869)\n  * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-124854)\n  * firefox: thunderbird: Use-after-free in the Layout: Positioned component (CVE-2026-124877)\n  * firefox: thunderbird: Sandbox escape due to use-after-free in the Widget: Gtk component (CVE-2026-124917)\n  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Selection component (CVE-2026-124891)\n  * firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component (CVE-2026-124857)\n  * firefox: thunderbird: Information disclosure in the Security: RLBox component (CVE-2026-124941)\n  * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-124855)\n  * firefox: thunderbird: Spoofing issue in the Security component (CVE-2026-124934)\n  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component (CVE-2026-124853)\n  * firefox: thunderbird: Sandbox escape in the DOM: Navigation component (CVE-2026-124905)\n  * firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component (CVE-2026-124859)\n  * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124881)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-124862)\n  * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124882)\n  * firefox: thunderbird: Information disclosure in the Private Browsing component (CVE-2026-124909)\n  * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124876)\n  * firefox: thunderbird: Use-after-free in the DOM: Workers component (CVE-2026-124893)\n  * firefox: thunderbird: Use-after-free in the Graphics: WebRender component (CVE-2026-124906)\n  * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-124887)\n  * firefox: thunderbird: Mitigation bypass in the WebExtensions component (CVE-2026-124910)\n  * firefox: thunderbird: Privilege escalation in the Nimbus Desktop Client component (CVE-2026-124951)\n  * firefox: thunderbird: Use-after-free in the Audio/Video component (CVE-2026-124865)\n  * firefox: thunderbird: Incorrect boundary conditions, use-after-free in the Graphics component (CVE-2026-124948)\n  * firefox: thunderbird: Undefined behavior in the WebRTC: Networking component (CVE-2026-124935)\n  * firefox: thunderbird: Incorrect boundary conditions in the DOM: CSS Object Model component (CVE-2026-124875)\n  * firefox: thunderbird: Sandbox escape due to use-after-free in the IPC component (CVE-2026-124903)\n  * firefox: thunderbird: Incorrect boundary conditions in the Networking: HTTP component (CVE-2026-124856)\n  * firefox: thunderbird: Use-after-free in the Networking: Cookies component (CVE-2026-124894)\n  * firefox: thunderbird: Use-after-free in the Storage: localStorage \u0026 sessionStorage component (CVE-2026-124895)\n  * firefox: thunderbird: Use-after-free in the Graphics: Text component (CVE-2026-124885)\n  * firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component (CVE-2026-124899)\n  * firefox: thunderbird: Sandbox escape in the Console component (CVE-2026-124933)\n  * firefox: thunderbird: Use-after-free in the Layout component (CVE-2026-124866)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-124883)\n  * firefox: thunderbird: Information disclosure in the Layout: Form Controls component (CVE-2026-124929)\n  * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component (CVE-2026-124870)\n  * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-124927)\n  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebGPU component (CVE-2026-124915)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-124890)\n  * firefox: thunderbird: Information disclosure in the Address Bar component (CVE-2026-124930)\n  * firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component (CVE-2026-124886)\n  * firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-124858)\n  * firefox: thunderbird: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component (CVE-2026-124907)\n  * firefox: thunderbird: Invalid pointer in the DOM: Editor component (CVE-2026-124873)\n  * firefox: thunderbird: Spoofing issue in the DOM: Security component (CVE-2026-124912)\n  * firefox: thunderbird: Same-origin policy bypass in the Networking: HTTP component (CVE-2026-124874)\n  * firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124892)\n  * firefox: thunderbird: Invalid pointer in the DOM: Streams component (CVE-2026-124942)\n  * firefox: thunderbird: Use-after-free in the CSS Transitions and Animations component (CVE-2026-124922)\n  * firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-124918)\n  * firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124884)\n  * firefox: thunderbird: Incorrect boundary conditions in the DOM: Core \u0026 HTML component (CVE-2026-124868)\n  * firefox: thunderbird: Privilege escalation due to use-after-free in the WebRTC: Networking component (CVE-2026-124919)\n  * firefox: thunderbird: Incorrect boundary conditions in the Graphics: WebRender component (CVE-2026-124924)\n  * firefox: thunderbird: Same-origin policy bypass due to race condition in the Audio/Video component (CVE-2026-124902)\n  * firefox: thunderbird: Invalid pointer in the Networking: Cache component (CVE-2026-124879)\n  * firefox: thunderbird: Use-after-free in the Graphics component (CVE-2026-124932)\n  * firefox: thunderbird: Mitigation bypass in the File Handling component (CVE-2026-124940)\n  * firefox: thunderbird: Same-origin policy bypass in the DOM: Core \u0026 HTML component (CVE-2026-124931)\n  * firefox: thunderbird: Incorrect boundary conditions in the WebRTC component (CVE-2026-124926)\n  * firefox: thunderbird: Use-after-free in the DOM: HTML Parser component (CVE-2026-124863)\n  * firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component (CVE-2026-124889)\n  * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-124913)\n  * firefox: thunderbird: Use-after-free in the JavaScript: GC component (CVE-2026-124897)\n  * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Service Workers component (CVE-2026-124864)\n  * firefox: thunderbird: Use-after-free in the Cycle Collector component (CVE-2026-124872)\n  * firefox: thunderbird: Use-after-free in the DOM: Core \u0026 HTML component (CVE-2026-124880)\n  * firefox: thunderbird: Invalid pointer in the Layout: Text and Fonts component (CVE-2026-124896)\n  * firefox: thunderbird: Other issue in the Networking: JAR component (CVE-2026-124901)\n  * firefox: thunderbird: Incorrect boundary conditions in the Layout: Text and Fonts component (CVE-2026-124888)\n  * firefox: thunderbird: Mitigation bypass in the Add-ons Manager component (CVE-2026-124938)\n  * firefox: thunderbird: Sandbox escape due to use-after-free in the Audio/Video: cubeb component (CVE-2026-124861)\n  * firefox: thunderbird: Use-after-free in the DOM: Editor component (CVE-2026-124898)\n  * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-124939)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:99112",
  "modified": "2026-11-12T21:34:27Z",
  "published": "2026-11-11T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:99112"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-118007"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-118019"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-118021"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-118024"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124853"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124854"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124855"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124856"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124857"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124858"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124859"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124860"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124861"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124862"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124863"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124864"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124865"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124866"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124868"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124869"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124870"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124872"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124873"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124874"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124875"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124876"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124877"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124879"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124880"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124881"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124882"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124883"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124884"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124885"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124886"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124887"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124888"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124889"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124890"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124891"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124892"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124893"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124894"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124895"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124896"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124897"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124898"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124899"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124901"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124902"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124903"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124905"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124906"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124907"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124909"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124910"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124912"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124913"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124914"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124915"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124917"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124918"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124919"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124922"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124924"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124926"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124927"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124929"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124930"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124931"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124932"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124933"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124934"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124935"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124938"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124939"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124940"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124941"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124942"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124948"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-124951"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2562015"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2562042"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2562122"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2562259"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2569830"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2569846"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2569877"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2569907"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2569955"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2569957"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2569970"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2569978"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2569982"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2569985"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2569994"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570012"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570014"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570100"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570107"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570116"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570127"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570137"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570140"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570149"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570165"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570172"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570208"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570241"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570248"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570255"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570306"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570334"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570365"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570417"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570433"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570440"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570491"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570514"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570521"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570548"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570574"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570589"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570601"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570629"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570636"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570644"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570655"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570660"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570662"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570664"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570686"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570704"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570705"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570717"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570726"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570740"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570753"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570755"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570770"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570787"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570811"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570824"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570865"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570876"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570896"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570942"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2570955"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571008"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571031"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571052"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571076"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571102"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571104"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571112"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571117"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571125"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571126"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571146"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571152"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571158"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2571162"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/8/ALSA-2026-99112.html"
    }
  ],
  "related": [
    "CVE-2026-118007",
    "CVE-2026-118019",
    "CVE-2026-118021",
    "CVE-2026-118024",
    "CVE-2026-124853",
    "CVE-2026-124854",
    "CVE-2026-124855",
    "CVE-2026-124856",
    "CVE-2026-124857",
    "CVE-2026-124858",
    "CVE-2026-124859",
    "CVE-2026-124860",
    "CVE-2026-124861",
    "CVE-2026-124862",
    "CVE-2026-124863",
    "CVE-2026-124864",
    "CVE-2026-124865",
    "CVE-2026-124866",
    "CVE-2026-124868",
    "CVE-2026-124869",
    "CVE-2026-124870",
    "CVE-2026-124872",
    "CVE-2026-124873",
    "CVE-2026-124874",
    "CVE-2026-124875",
    "CVE-2026-124876",
    "CVE-2026-124877",
    "CVE-2026-124879",
    "CVE-2026-124880",
    "CVE-2026-124881",
    "CVE-2026-124882",
    "CVE-2026-124883",
    "CVE-2026-124884",
    "CVE-2026-124885",
    "CVE-2026-124886",
    "CVE-2026-124887",
    "CVE-2026-124888",
    "CVE-2026-124889",
    "CVE-2026-124890",
    "CVE-2026-124891",
    "CVE-2026-124892",
    "CVE-2026-124893",
    "CVE-2026-124894",
    "CVE-2026-124895",
    "CVE-2026-124896",
    "CVE-2026-124897",
    "CVE-2026-124898",
    "CVE-2026-124899",
    "CVE-2026-124901",
    "CVE-2026-124902",
    "CVE-2026-124903",
    "CVE-2026-124905",
    "CVE-2026-124906",
    "CVE-2026-124907",
    "CVE-2026-124909",
    "CVE-2026-124910",
    "CVE-2026-124912",
    "CVE-2026-124913",
    "CVE-2026-124914",
    "CVE-2026-124915",
    "CVE-2026-124917",
    "CVE-2026-124918",
    "CVE-2026-124919",
    "CVE-2026-124922",
    "CVE-2026-124924",
    "CVE-2026-124926",
    "CVE-2026-124927",
    "CVE-2026-124929",
    "CVE-2026-124930",
    "CVE-2026-124931",
    "CVE-2026-124932",
    "CVE-2026-124933",
    "CVE-2026-124934",
    "CVE-2026-124935",
    "CVE-2026-124938",
    "CVE-2026-124939",
    "CVE-2026-124940",
    "CVE-2026-124941",
    "CVE-2026-124942",
    "CVE-2026-124948",
    "CVE-2026-124951"
  ],
  "schema_version": "1.7.0",
  "summary": "Important: firefox security update",
  "upstream": [
    "CVE-2026-118007",
    "CVE-2026-118019",
    "CVE-2026-118021",
    "CVE-2026-118024",
    "CVE-2026-124853",
    "CVE-2026-124854",
    "CVE-2026-124855",
    "CVE-2026-124856",
    "CVE-2026-124857",
    "CVE-2026-124858",
    "CVE-2026-124859",
    "CVE-2026-124860",
    "CVE-2026-124861",
    "CVE-2026-124862",
    "CVE-2026-124863",
    "CVE-2026-124864",
    "CVE-2026-124865",
    "CVE-2026-124866",
    "CVE-2026-124868",
    "CVE-2026-124869",
    "CVE-2026-124870",
    "CVE-2026-124872",
    "CVE-2026-124873",
    "CVE-2026-124874",
    "CVE-2026-124875",
    "CVE-2026-124876",
    "CVE-2026-124877",
    "CVE-2026-124879",
    "CVE-2026-124880",
    "CVE-2026-124881",
    "CVE-2026-124882",
    "CVE-2026-124883",
    "CVE-2026-124884",
    "CVE-2026-124885",
    "CVE-2026-124886",
    "CVE-2026-124887",
    "CVE-2026-124888",
    "CVE-2026-124889",
    "CVE-2026-124890",
    "CVE-2026-124891",
    "CVE-2026-124892",
    "CVE-2026-124893",
    "CVE-2026-124894",
    "CVE-2026-124895",
    "CVE-2026-124896",
    "CVE-2026-124897",
    "CVE-2026-124898",
    "CVE-2026-124899",
    "CVE-2026-124901",
    "CVE-2026-124902",
    "CVE-2026-124903",
    "CVE-2026-124905",
    "CVE-2026-124906",
    "CVE-2026-124907",
    "CVE-2026-124909",
    "CVE-2026-124910",
    "CVE-2026-124912",
    "CVE-2026-124913",
    "CVE-2026-124914",
    "CVE-2026-124915",
    "CVE-2026-124917",
    "CVE-2026-124918",
    "CVE-2026-124919",
    "CVE-2026-124922",
    "CVE-2026-124924",
    "CVE-2026-124926",
    "CVE-2026-124927",
    "CVE-2026-124929",
    "CVE-2026-124930",
    "CVE-2026-124931",
    "CVE-2026-124932",
    "CVE-2026-124933",
    "CVE-2026-124934",
    "CVE-2026-124935",
    "CVE-2026-124938",
    "CVE-2026-124939",
    "CVE-2026-124940",
    "CVE-2026-124941",
    "CVE-2026-124942",
    "CVE-2026-124948",
    "CVE-2026-124951"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.