CVENow
Log in Create account
Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

37 237
matching records · page 94 of 1490
CVE-2026-117974 NOT SCORED No CVSS score available

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117973 NOT SCORED No CVSS score available

Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117972 NOT SCORED No CVSS score available

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117971 NOT SCORED No CVSS score available

Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117970 NOT SCORED No CVSS score available

Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117969 NOT SCORED No CVSS score available

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117968 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117967 NOT SCORED No CVSS score available

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117966 NOT SCORED No CVSS score available

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117965 NOT SCORED No CVSS score available

Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117964 NOT SCORED No CVSS score available

Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117963 NOT SCORED No CVSS score available

Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117962 NOT SCORED No CVSS score available

Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117961 NOT SCORED No CVSS score available

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117960 NOT SCORED No CVSS score available

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117959 NOT SCORED No CVSS score available

Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117958 NOT SCORED No CVSS score available

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117957 NOT SCORED No CVSS score available

Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117956 NOT SCORED No CVSS score available

Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117955 NOT SCORED No CVSS score available

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117954 NOT SCORED No CVSS score available

Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117953 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117952 NOT SCORED No CVSS score available

Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117951 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117950 NOT SCORED No CVSS score available

Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →