CVE Vulnerability Database
Search and browse 425,098 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-100777 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, ... |
| CVE-2026-100776 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird ... |
| CVE-2026-100775 | CRITICAL | 9.6 | 0.4% | Sep 29, 2026 | Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbir... |
| CVE-2026-100774 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Th... |
| CVE-2026-100773 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, ... |
| CVE-2026-100772 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Th... |
| CVE-2026-100771 | HIGH | 8.1 | 0.3% | Sep 29, 2026 | Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Th... |
| CVE-2026-100770 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ES... |
| CVE-2026-100769 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird ... |
| CVE-2026-100768 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
| CVE-2026-100767 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, T... |
| CVE-2026-100766 | MEDIUM | 4.3 | 0.3% | Sep 29, 2026 | Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird ... |
| CVE-2026-100765 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird ... |
| CVE-2026-100764 | HIGH | 8.8 | 0.2% | Sep 29, 2026 | Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixe... |
| CVE-2026-100763 | CRITICAL | 9.1 | 0.4% | Sep 29, 2026 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Fir... |
| CVE-2026-100762 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ES... |
| CVE-2026-100761 | HIGH | 8.8 | 0.2% | Sep 29, 2026 | Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbir... |
| CVE-2026-100760 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunder... |
| CVE-2026-100759 | HIGH | 8.1 | 0.3% | Sep 29, 2026 | Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunder... |
| CVE-2026-100758 | CRITICAL | 9.6 | 0.3% | Sep 29, 2026 | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thu... |
| CVE-2026-100757 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird ... |
| CVE-2026-100756 | HIGH | 8.1 | 0.3% | Sep 29, 2026 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4,... |
| CVE-2026-95520 | HIGH | 7.1 | 0.1% | Sep 29, 2026 | A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared R... |
| CVE-2026-87748 | HIGH | 8.8 | — | Sep 29, 2026 | Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse. This ... |
| CVE-2026-85520 | CRITICAL | 9.3 | — | Sep 29, 2026 | Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the ... |