Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
168,566 matching · page 85/3372Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-117973(opens NVD record) | Unscored | — | Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117972(opens NVD record) | Unscored | — | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117971(opens NVD record) | Unscored | — | Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117970(opens NVD record) | Unscored | — | Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117969(opens NVD record) | Unscored | — | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117968(opens NVD record) | Unscored | — | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117967(opens NVD record) | Unscored | — | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117966(opens NVD record) | Unscored | — | Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117965(opens NVD record) | Unscored | — | Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117964(opens NVD record) | Unscored | — | Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117963(opens NVD record) | Unscored | — | Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117962(opens NVD record) | Unscored | — | Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117961(opens NVD record) | Unscored | — | Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117960(opens NVD record) | Unscored | — | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117959(opens NVD record) | Unscored | — | Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117958(opens NVD record) | Unscored | — | Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117957(opens NVD record) | Unscored | — | Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117956(opens NVD record) | Unscored | — | Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117955(opens NVD record) | Unscored | — | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117954(opens NVD record) | Unscored | — | Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117953(opens NVD record) | Unscored | — | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117952(opens NVD record) | Unscored | — | Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117951(opens NVD record) | Unscored | — | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117950(opens NVD record) | Unscored | — | Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117949(opens NVD record) | Unscored | — | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117948(opens NVD record) | Unscored | — | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117947(opens NVD record) | Unscored | — | Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117946(opens NVD record) | Unscored | — | Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117945(opens NVD record) | Unscored | — | Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117944(opens NVD record) | Unscored | — | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117943(opens NVD record) | Unscored | — | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117942(opens NVD record) | Unscored | — | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117941(opens NVD record) | Unscored | — | Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117940(opens NVD record) | High | 8.8 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117939(opens NVD record) | Medium | 6.3 | Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117938(opens NVD record) | Medium | 6.3 | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117937(opens NVD record) | High | 7.3 | Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117936(opens NVD record) | High | 8.8 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117935(opens NVD record) | Unscored | — | Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117934(opens NVD record) | Unscored | — | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117933(opens NVD record) | Unscored | — | Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117932(opens NVD record) | Unscored | — | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117931(opens NVD record) | Unscored | — | Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117930(opens NVD record) | Unscored | — | Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117929(opens NVD record) | High | 8.8 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117928(opens NVD record) | High | 8.1 | Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117927(opens NVD record) | Medium | 6.3 | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117926(opens NVD record) | High | 8.1 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117925(opens NVD record) | High | 8.8 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117924(opens NVD record) | Medium | 6.3 | Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |