Mozilla Foundation Security Advisory 2026-119

Security Vulnerabilities fixed in Firefox ESR 115.44

Announced

October 27, 2026

Impact

high

Products

Firefox ESR

Fixed in

Firefox ESR 115.44

Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.

#CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component

Reporter: Mozilla
Impact: high

References

Bug 2040905

#CVE-2026-117862: Privilege escalation due to incorrect boundary conditions in the Networking component

Reporter: Mozilla
Impact: high

References

Bug 2054644

#CVE-2026-117863: Information disclosure due to uninitialized memory in the Audio/Video component

Reporter: Mozilla
Impact: high

References

Bug 2056783

#CVE-2026-117866: Privilege escalation due to use-after-free in the Graphics: Canvas2D component

Reporter: Mozilla
Impact: high

References

Bug 2059011

#CVE-2026-117867: Use-after-free in the Layout component

Reporter: Mozilla
Impact: high

References

Bug 2059110

#CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component

Reporter: Mozilla
Impact: high

References

Bug 2059150

#CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component

Reporter: Mozilla
Impact: high

References

Bug 2059151

#CVE-2026-117868: Sandbox escape in the DOM: Networking component

Reporter: Yaqoub Aldurayhim
Impact: high

References

Bug 2059961

#CVE-2026-117869: Use-after-free in the DOM: Core & HTML component

Reporter: Mozilla
Impact: high

References

Bug 2068362

#CVE-2026-117870: Use-after-free in the JavaScript Engine component

Reporter: Mozilla
Impact: high

References

Bug 2068395

#CVE-2026-117872: Use-after-free in the JavaScript: Standard Library component

Reporter: Mozilla
Impact: high

References

Bug 2068410

#CVE-2026-117873: Incorrect boundary conditions in the Audio/Video: Playback component

Reporter: Mozilla
Impact: high

References

Bug 2071733

#CVE-2026-117874: Use-after-free in the Internationalization component

Reporter: Mozilla
Impact: high

References

Bug 2073685

#CVE-2026-117876: Use-after-free in the Layout: Text and Fonts component

Reporter: Amy Burnett of OpenAI
Impact: high

References

Bug 2074167

#CVE-2026-117878: Other issue, use-after-free in the Storage: IndexedDB component

Reporter: Amy Burnett of OpenAI
Impact: high

References

Bug 2075431

#CVE-2026-117879: Incorrect boundary conditions in the Layout: Tables component

Reporter: Amy Burnett of OpenAI
Impact: high

References

Bug 2075432

#CVE-2026-117880: Use-after-free in the XML component

Reporter: Mozilla
Impact: high

References

Bug 2075996

#CVE-2026-117881: Use-after-free in the DOM: Core & HTML component

Reporter: Amy Burnett of OpenAI
Impact: high

References

Bug 2076267

#CVE-2026-117882: Use-after-free in the Layout component

Reporter: Amy Burnett of OpenAI
Impact: high

References

Bug 2076268

#CVE-2026-117883: Use-after-free in the DOM: HTML Parser component

Reporter: Amy Burnett of OpenAI
Impact: high

References

Bug 2076271

#CVE-2026-117884: Use-after-free in the Networking component

Reporter: Mozilla
Impact: high

References

Bug 2076410

#CVE-2026-117886: Incorrect boundary conditions in the Graphics: Text component

Reporter: tsui
Impact: high

References

Bug 2077162

#CVE-2026-117887: Use-after-free in the DOM: Core & HTML component

Reporter: Mozilla
Impact: high

References

Bug 2077385

#CVE-2026-117889: Incorrect boundary conditions in the JavaScript Engine component

Reporter: Mozilla
Impact: high

References

Bug 2078727

#CVE-2026-117891: Use-after-free in the JavaScript Engine: JIT component

Reporter: Mozilla
Impact: high

References

Bug 2078837

#CVE-2026-117892: Privilege escalation due to use-after-free in the WebRTC: Networking component

Reporter: Mozilla
Impact: high

References

Bug 2078902

#CVE-2026-117893: Incorrect boundary conditions in the Security: PSM component

Reporter: Mozilla
Impact: high

References

Bug 2078946

#CVE-2026-117895: Use-after-free in the DOM: Core & HTML component

Reporter: Mozilla
Impact: high

References

Bug 2078994

#CVE-2026-117896: Use-after-free in the DOM: Core & HTML component

Reporter: Mozilla
Impact: high

References

Bug 2079032

#CVE-2026-117897: Incorrect boundary conditions in the Layout: Tables component

Reporter: Mozilla
Impact: high

References

Bug 2079036

#CVE-2026-117899: Use-after-free in the Networking: HTTP component

Reporter: Mozilla
Impact: high

References

Bug 2079046

#CVE-2026-117900: Use-after-free in the DOM: Editor component

Reporter: Mozilla
Impact: high

References

Bug 2079053

#CVE-2026-117901: Use-after-free in the DOM: Core & HTML component

Reporter: Mozilla
Impact: high

References

Bug 2079054

#CVE-2026-117903: Use-after-free in the Audio/Video component

Reporter: Mozilla
Impact: high

References

Bug 2079058

#CVE-2026-117905: Use-after-free in the Audio/Video: Playback component

Reporter: Mozilla
Impact: high

References

Bug 2079061

#CVE-2026-117906: Use-after-free in the CSS Parsing and Computation component

Reporter: Mozilla
Impact: high

References

Bug 2079062

#CVE-2026-117907: Use-after-free in the Networking component

Reporter: Mozilla
Impact: high

References

Bug 2079068

#CVE-2026-117908: Use-after-free in the Graphics: ImageLib component

Reporter: Mozilla
Impact: high

References

Bug 2079069

#CVE-2026-117911: Use-after-free in the Audio/Video: Playback component

Reporter: Mozilla
Impact: high

References

Bug 2079171

#CVE-2026-117912: Same-origin policy bypass in the CSS Parsing and Computation component

Reporter: Takashi Suzuki
Impact: high

References

Bug 2079209

#CVE-2026-117914: Use-after-free in the SVG component

Reporter: Mozilla
Impact: high

References

Bug 2079253

#CVE-2026-117915: Incorrect boundary conditions in the Layout: Block and Inline component

Reporter: Mozilla
Impact: high

References

Bug 2079255

#CVE-2026-117917: Invalid pointer in the Graphics: WebRender component

Reporter: Nguyen Tuan Hung
Impact: high

References

Bug 2079301

#CVE-2026-117918: Use-after-free in the Graphics: Canvas2D component

Reporter: Mozilla
Impact: high

References

Bug 2079676

#CVE-2026-117919: Use-after-free in the DOM: Core & HTML component

Reporter: Mozilla
Impact: high

References

Bug 2079677

#CVE-2026-117921: Use-after-free in the CSS Parsing and Computation component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2079687

#CVE-2026-117922: Use-after-free in the Networking: WebSockets component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2079692

#CVE-2026-117923: Use-after-free in the Audio/Video component

Reporter: Mozilla
Impact: high

References

Bug 2079781

#CVE-2026-117924: Use-after-free in the XSLT component

Reporter: Mozilla
Impact: high

References

Bug 2079783

#CVE-2026-117925: Use-after-free in the DOM: Core & HTML component

Reporter: Mozilla
Impact: high

References

Bug 2079786

#CVE-2026-117926: Incorrect boundary conditions in the SVG component

Reporter: Mozilla
Impact: high

References

Bug 2079924

#CVE-2026-117927: Use-after-free in the SVG component

Reporter: Mozilla
Impact: high

References

Bug 2080102

#CVE-2026-117929: Use-after-free in the DOM: Core & HTML component

Reporter: Mozilla
Impact: high

References

Bug 2081549

#CVE-2026-117930: Use-after-free in the DOM: Bindings (WebIDL) component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2081953

#CVE-2026-117931: Use-after-free in the DOM: Events component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2081969

#CVE-2026-117934: Use-after-free in the Layout component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2081977

#CVE-2026-117935: Use-after-free in the DOM: Bindings (WebIDL) component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082000

#CVE-2026-117936: Use-after-free in the DOM: Core & HTML component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082001

#CVE-2026-117937: Invalid pointer in the JavaScript Engine component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082005

#CVE-2026-117938: Use-after-free in the Layout component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082009

#CVE-2026-117939: Use-after-free in the XML component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082030

#CVE-2026-117941: Use-after-free in the DOM: CSS Object Model component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082044

#CVE-2026-117942: Incorrect boundary conditions in the JavaScript Engine: JIT component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082047

#CVE-2026-117943: Use-after-free in the DOM: Core & HTML component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082061

#CVE-2026-117944: Use-after-free in the Layout component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082064

#CVE-2026-117946: Incorrect boundary conditions in the JavaScript Engine component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082092

#CVE-2026-117948: Use-after-free in the SVG component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082112

#CVE-2026-117949: Use-after-free in the DOM: Core & HTML component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082118

#CVE-2026-117950: Incorrect boundary conditions in the DOM: Core & HTML component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082127

#CVE-2026-117951: Use-after-free in the DOM: Core & HTML component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082130

#CVE-2026-117952: Uninitialized memory in the Networking component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082139

#CVE-2026-117954: Use-after-free in the Layout: Positioned component

Reporter: OpenAI Codex Security (kylebot)
Impact: high

References

Bug 2082450

#CVE-2026-117966: Site isolation issue in the Networking: HTTP component

Reporter: Mozilla
Impact: moderate

References

Bug 2075726

#CVE-2026-117968: Use-after-free in the DOM: Core & HTML component

Reporter: Mozilla
Impact: moderate

References

Bug 2075985

#CVE-2026-117971: Sandbox escape due to use-after-free in the Print Preview component

Reporter: Mozilla
Impact: moderate

References

Bug 2076399

#CVE-2026-117974: Use-after-free in the XML component

Reporter: Mozilla
Impact: moderate

References

Bug 2076705

#CVE-2026-117978: Incorrect boundary conditions in the Graphics component

Reporter: Mozilla
Impact: moderate

References

Bug 2077730

#CVE-2026-117979: Incorrect boundary conditions in the Graphics: WebRender component

Reporter: Mozilla
Impact: moderate

References

Bug 2077739

#CVE-2026-117992: Information disclosure in the CSS Parsing and Computation component

Reporter: Takashi Suzuki
Impact: moderate

References

Bug 2079709

#CVE-2026-118027: Frame poisoning in the Layout component

Reporter: Mozilla
Impact: low

References

Bug 2045606