CVE-2026-117906None▾ SunlitUse-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
FirefoxThunderbirdRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-117999NoneRace condition in the IPC component
CVE-2026-117976NoneSite isolation issue in the DOM: Navigation component
CVE-2026-118004NoneIncorrect boundary conditions in the CSS Transitions and Animations component
CVE-2026-118000NoneInformation disclosure in the Networking: HTTP component
CVE-2026-118002NoneInformation disclosure due to race condition in the Networking component
CVE-2026-117997NoneSandbox escape due to use-after-free in the Widget component