CVE-2026-118011 | Mozilla Firefox up to 158 CSS Parsing/Computation cross site scripting

October 27, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 158. The impacted element is an unknown function of the component CSS Parsing/Computation. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-118011. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More