Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

51 581
matching records · page 380 of 2064
CVE-2026-117898 MEDIUM CVSS 6.33.1

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117897 HIGH CVSS 7.33.1

Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117896 MEDIUM CVSS 6.33.1

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117895 MEDIUM CVSS 6.33.1

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117894 MEDIUM CVSS 5.43.1

Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117893 MEDIUM CVSS 5.43.1

Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117892 HIGH CVSS 7.33.1

Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117891 HIGH CVSS 7.33.1

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117890 HIGH CVSS 7.33.1

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117889 HIGH CVSS 7.33.1

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117888 MEDIUM CVSS 5.43.1

Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117887 HIGH CVSS 8.83.1

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117886 HIGH CVSS 8.13.1

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117885 MEDIUM CVSS 6.33.1

Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117884 HIGH CVSS 8.83.1

Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117883 HIGH CVSS 8.83.1

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117882 MEDIUM CVSS 6.33.1

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117881 HIGH CVSS 8.83.1

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117880 MEDIUM CVSS 6.33.1

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117879 HIGH CVSS 7.33.1

Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117878 MEDIUM CVSS 6.33.1

Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117877 MEDIUM CVSS 6.33.1

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117876 MEDIUM CVSS 6.33.1

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117875 MEDIUM CVSS 6.33.1

Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →
CVE-2026-117874 MEDIUM CVSS 6.33.1

Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 04 Nov 2026 View details →