Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

36 951
matching records · page 87 of 1479
CVE-2026-117941 NOT SCORED No CVSS score available

Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117940 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117939 NOT SCORED No CVSS score available

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117938 NOT SCORED No CVSS score available

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117937 NOT SCORED No CVSS score available

Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117936 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117935 NOT SCORED No CVSS score available

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117934 NOT SCORED No CVSS score available

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117933 NOT SCORED No CVSS score available

Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117932 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117931 NOT SCORED No CVSS score available

Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117930 NOT SCORED No CVSS score available

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117929 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117928 NOT SCORED No CVSS score available

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117927 NOT SCORED No CVSS score available

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117926 NOT SCORED No CVSS score available

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117925 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117924 NOT SCORED No CVSS score available

Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117923 NOT SCORED No CVSS score available

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117922 NOT SCORED No CVSS score available

Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117921 NOT SCORED No CVSS score available

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117920 NOT SCORED No CVSS score available

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117919 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117918 NOT SCORED No CVSS score available

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117917 NOT SCORED No CVSS score available

Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →