2026 CVE Vulnerabilities
70,624 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-2806 | CRITICAL | 9.1 | 0.4% | Feb 24, 2026 | Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2805 | CRITICAL | 9.8 | 0.4% | Feb 24, 2026 | Invalid pointer in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2804 | MEDIUM | 5.4 | 0.3% | Feb 24, 2026 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148... |
| CVE-2026-2803 | HIGH | 7.5 | 0.3% | Feb 24, 2026 | Information disclosure, mitigation bypass in the Settings UI component. This vulnerability was fixed in Firefox 148 and ... |
| CVE-2026-2802 | MEDIUM | 4.2 | 0.1% | Feb 24, 2026 | Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2801 | HIGH | 7.5 | 0.3% | Feb 24, 2026 | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and ... |
| CVE-2026-2800 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 148 and Thunder... |
| CVE-2026-2799 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2798 | HIGH | 8.8 | 0.2% | Feb 24, 2026 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2797 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2796 | CRITICAL | 9.8 | 0.6% | Feb 24, 2026 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird... |
| CVE-2026-2795 | CRITICAL | 9.8 | 0.2% | Feb 24, 2026 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148. |
| CVE-2026-2794 | HIGH | 7.5 | 0.3% | Feb 24, 2026 | Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixe... |
| CVE-2026-2793 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird ... |
| CVE-2026-2792 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these b... |
| CVE-2026-2791 | CRITICAL | 9.8 | 0.4% | Feb 24, 2026 | Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Th... |
| CVE-2026-2790 | CRITICAL | 9.8 | 0.2% | Feb 24, 2026 | Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140... |
| CVE-2026-2789 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Fir... |
| CVE-2026-2788 | CRITICAL | 9.8 | 0.4% | Feb 24, 2026 | Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ES... |
| CVE-2026-2787 | CRITICAL | 9.8 | 0.4% | Feb 24, 2026 | Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.3... |
| CVE-2026-2786 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thund... |
| CVE-2026-2785 | CRITICAL | 9.8 | 0.4% | Feb 24, 2026 | Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thun... |
| CVE-2026-2784 | CRITICAL | 9.8 | 0.4% | Feb 24, 2026 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunde... |
| CVE-2026-2783 | HIGH | 7.5 | 0.3% | Feb 24, 2026 | Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed i... |
| CVE-2026-2782 | CRITICAL | 9.8 | 0.3% | Feb 24, 2026 | Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunde... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now