Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
83,150 matching · page 86/1663Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-117923(opens NVD record) | Medium | 6.3 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117922(opens NVD record) | High | 8.8 | Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117921(opens NVD record) | High | 8.8 | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117920(opens NVD record) | Critical | 9.6 | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117919(opens NVD record) | High | 8.8 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117918(opens NVD record) | High | 8.8 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117917(opens NVD record) | Critical | 9.8 | Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117916(opens NVD record) | Medium | 6.3 | Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117915(opens NVD record) | High | 7.3 | Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117914(opens NVD record) | Medium | 6.3 | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117913(opens NVD record) | Medium | 6.3 | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117912(opens NVD record) | High | 8.1 | Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117911(opens NVD record) | Medium | 6.3 | Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117910(opens NVD record) | High | 7.3 | Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117909(opens NVD record) | Medium | 6.3 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117908(opens NVD record) | Medium | 6.3 | Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117907(opens NVD record) | Medium | 6.3 | Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117906(opens NVD record) | Medium | 6.3 | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117905(opens NVD record) | Medium | 6.3 | Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117904(opens NVD record) | High | 8.8 | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117903(opens NVD record) | Medium | 6.3 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117902(opens NVD record) | Medium | 6.3 | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117901(opens NVD record) | High | 8.8 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117900(opens NVD record) | High | 8.8 | Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117899(opens NVD record) | High | 8.8 | Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117898(opens NVD record) | Medium | 6.3 | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117897(opens NVD record) | High | 7.3 | Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117896(opens NVD record) | Medium | 6.3 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117895(opens NVD record) | Medium | 6.3 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117894(opens NVD record) | Medium | 5.4 | Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117893(opens NVD record) | Medium | 5.4 | Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117892(opens NVD record) | High | 7.3 | Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117891(opens NVD record) | High | 7.3 | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117890(opens NVD record) | High | 7.3 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117889(opens NVD record) | High | 7.3 | Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117888(opens NVD record) | Medium | 5.4 | Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117887(opens NVD record) | High | 8.8 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117886(opens NVD record) | High | 8.1 | Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117885(opens NVD record) | Medium | 6.3 | Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117884(opens NVD record) | High | 8.8 | Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117883(opens NVD record) | High | 8.8 | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117882(opens NVD record) | Medium | 6.3 | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117881(opens NVD record) | High | 8.8 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117880(opens NVD record) | Medium | 6.3 | Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117879(opens NVD record) | High | 7.3 | Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117878(opens NVD record) | Medium | 6.3 | Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117877(opens NVD record) | Medium | 6.3 | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117876(opens NVD record) | Medium | 6.3 | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117875(opens NVD record) | Medium | 6.3 | Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |
| CVE-2026-117874(opens NVD record) | Medium | 6.3 | Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. | Oct 27, 2026 |