CVE Vulnerability Database
Search and browse 425,098 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-100828 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 1... |
| CVE-2026-100826 | MEDIUM | 6.5 | 0.2% | Sep 29, 2026 | Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbi... |
| CVE-2026-100825 | HIGH | 8.8 | 0.2% | Sep 29, 2026 | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 1... |
| CVE-2026-100824 | HIGH | 8.8 | 0.2% | Sep 29, 2026 | Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunde... |
| CVE-2026-100823 | MEDIUM | 5.4 | 0.2% | Sep 29, 2026 | Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157. |
| CVE-2026-100822 | MEDIUM | 5.4 | 0.2% | Sep 29, 2026 | Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Th... |
| CVE-2026-100821 | MEDIUM | 4.7 | 0.2% | Sep 29, 2026 | Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbir... |
| CVE-2026-100820 | HIGH | 8.8 | 0.2% | Sep 29, 2026 | Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, T... |
| CVE-2026-100819 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR ... |
| CVE-2026-100818 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Th... |
| CVE-2026-100817 | MEDIUM | 5.4 | 0.2% | Sep 29, 2026 | Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100816 | HIGH | 8.1 | 0.2% | Sep 29, 2026 | Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 15... |
| CVE-2026-100815 | HIGH | 8.8 | 0.2% | Sep 29, 2026 | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderb... |
| CVE-2026-100814 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4... |
| CVE-2026-100813 | HIGH | 8.8 | 0.2% | Sep 29, 2026 | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157... |
| CVE-2026-100812 | MEDIUM | 6.5 | 0.3% | Sep 29, 2026 | Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunder... |
| CVE-2026-100811 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.... |
| CVE-2026-100810 | CRITICAL | 9.8 | 0.4% | Sep 29, 2026 | Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100809 | HIGH | 8.1 | 0.2% | Sep 29, 2026 | Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157,... |
| CVE-2026-100808 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird ... |
| CVE-2026-100807 | HIGH | 8.8 | 0.2% | Sep 29, 2026 | Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbi... |
| CVE-2026-100806 | MEDIUM | 4.3 | 0.3% | Sep 29, 2026 | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 1... |
| CVE-2026-100805 | HIGH | 7.5 | 0.2% | Sep 29, 2026 | Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox... |
| CVE-2026-100804 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird ... |
| CVE-2026-100803 | HIGH | 8.1 | 0.2% | Sep 29, 2026 | Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird... |