CVE Vulnerability Database
Search and browse 420,406 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-118007 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
| CVE-2026-118006 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 1... |
| CVE-2026-118005 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
| CVE-2026-118004 | HIGH | 8.1 | 0.2% | Oct 27, 2026 | Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 1... |
| CVE-2026-118003 | HIGH | 8.1 | 0.2% | Oct 27, 2026 | Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6,... |
| CVE-2026-118002 | HIGH | 8.1 | 0.2% | Oct 27, 2026 | Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, F... |
| CVE-2026-118000 | HIGH | 8.1 | 0.2% | Oct 27, 2026 | Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6... |
| CVE-2026-117999 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, an... |
| CVE-2026-117998 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153... |
| CVE-2026-117997 | CRITICAL | 9.6 | 0.2% | Oct 27, 2026 | Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 1... |
| CVE-2026-117996 | HIGH | 8.1 | 0.2% | Oct 27, 2026 | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, T... |
| CVE-2026-117995 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Fire... |
| CVE-2026-117994 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderb... |
| CVE-2026-117993 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunde... |
| CVE-2026-117992 | MEDIUM | 6.5 | 0.2% | Oct 27, 2026 | Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefo... |
| CVE-2026-117991 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Fire... |
| CVE-2026-117990 | CRITICAL | 9.6 | 0.2% | Oct 27, 2026 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed i... |
| CVE-2026-117989 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 15... |
| CVE-2026-117988 | CRITICAL | 9.6 | 0.2% | Oct 27, 2026 | Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed... |
| CVE-2026-117987 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 15... |
| CVE-2026-117986 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 15... |
| CVE-2026-117985 | CRITICAL | 9.6 | 0.2% | Oct 27, 2026 | Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR... |
| CVE-2026-117984 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 1... |
| CVE-2026-117983 | HIGH | 8.8 | 0.2% | Oct 27, 2026 | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 15... |
| CVE-2026-117982 | CRITICAL | 9.8 | 0.2% | Oct 27, 2026 | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6,... |