Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
83,150 matching · page 84/1663Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-118024(opens NVD record) | Unscored | — | Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118023(opens NVD record) | Unscored | — | Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118022(opens NVD record) | Unscored | — | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118021(opens NVD record) | Unscored | — | Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118020(opens NVD record) | Unscored | — | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118019(opens NVD record) | Unscored | — | Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118018(opens NVD record) | Unscored | — | Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159. | Oct 27, 2026 |
| CVE-2026-118017(opens NVD record) | Unscored | — | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118016(opens NVD record) | Unscored | — | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118015(opens NVD record) | Unscored | — | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118014(opens NVD record) | Unscored | — | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118013(opens NVD record) | Unscored | — | Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118012(opens NVD record) | Unscored | — | Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118011(opens NVD record) | Unscored | — | Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118010(opens NVD record) | Unscored | — | Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118009(opens NVD record) | Unscored | — | Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118008(opens NVD record) | High | 8.8 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118007(opens NVD record) | Unscored | — | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118006(opens NVD record) | Unscored | — | Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118005(opens NVD record) | Unscored | — | Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. | Oct 27, 2026 |
| CVE-2026-118004(opens NVD record) | Unscored | — | Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-118003(opens NVD record) | Unscored | — | Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-118002(opens NVD record) | Unscored | — | Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-118000(opens NVD record) | Unscored | — | Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117999(opens NVD record) | Unscored | — | Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117998(opens NVD record) | Unscored | — | Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117997(opens NVD record) | Unscored | — | Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117996(opens NVD record) | Unscored | — | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117995(opens NVD record) | Unscored | — | Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117994(opens NVD record) | Unscored | — | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117993(opens NVD record) | Unscored | — | Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117992(opens NVD record) | Unscored | — | Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117991(opens NVD record) | Unscored | — | Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117990(opens NVD record) | Unscored | — | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117989(opens NVD record) | Unscored | — | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117988(opens NVD record) | Unscored | — | Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117987(opens NVD record) | Unscored | — | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117986(opens NVD record) | Unscored | — | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117985(opens NVD record) | Unscored | — | Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117984(opens NVD record) | Unscored | — | Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117983(opens NVD record) | Unscored | — | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117982(opens NVD record) | Unscored | — | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117981(opens NVD record) | Unscored | — | Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117980(opens NVD record) | Unscored | — | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117979(opens NVD record) | Unscored | — | Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117978(opens NVD record) | Unscored | — | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117977(opens NVD record) | Unscored | — | Other issue in the Console component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117976(opens NVD record) | Unscored | — | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117975(opens NVD record) | Unscored | — | Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117974(opens NVD record) | Unscored | — | Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |