CVE Vulnerability Database
Search and browse 425,098 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-100802 | MEDIUM | 4.3 | 0.3% | Sep 29, 2026 | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100801 | HIGH | 8.8 | 0.2% | Sep 29, 2026 | Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, ... |
| CVE-2026-100800 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ES... |
| CVE-2026-100799 | MEDIUM | 4.3 | 0.3% | Sep 29, 2026 | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100798 | HIGH | 8.1 | 0.2% | Sep 29, 2026 | Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird ... |
| CVE-2026-100797 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox... |
| CVE-2026-100796 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157... |
| CVE-2026-100795 | MEDIUM | 6.5 | 0.3% | Sep 29, 2026 | Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100794 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed ... |
| CVE-2026-100793 | MEDIUM | 6.5 | 0.3% | Sep 29, 2026 | JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100792 | HIGH | 7.1 | 0.3% | Sep 29, 2026 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderb... |
| CVE-2026-100791 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Th... |
| CVE-2026-100790 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 14... |
| CVE-2026-100789 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, ... |
| CVE-2026-100788 | CRITICAL | 9.8 | 0.4% | Sep 29, 2026 | Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird... |
| CVE-2026-100787 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153... |
| CVE-2026-100786 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thund... |
| CVE-2026-100785 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Th... |
| CVE-2026-100784 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 1... |
| CVE-2026-100783 | MEDIUM | 4.3 | 0.3% | Sep 29, 2026 | Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, T... |
| CVE-2026-100782 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Fir... |
| CVE-2026-100781 | CRITICAL | 9.6 | 0.4% | Sep 29, 2026 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed i... |
| CVE-2026-100780 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Th... |
| CVE-2026-100779 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 14... |
| CVE-2026-100778 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.... |