Browse All CVEs
33,487 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-12294 |
— | — | 0.0036 | 2026-10-29 | Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, | |
CVE-2026-12295 |
— | — | 0.0039 | 2026-10-29 | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-12296 |
— | — | 0.0039 | 2026-10-29 | Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed | |
CVE-2026-12297 |
— | — | 0.0039 | 2026-10-29 | Sandbox escape due to incorrect boundary conditions in the Networking component. This vuln | |
CVE-2026-12298 |
— | — | 0.0031 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12299 |
— | — | 0.0031 | 2026-10-29 | JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Fire | |
CVE-2026-12300 |
medium | 5.3 | 0.0025 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 an | |
CVE-2026-12301 |
medium | 5.3 | 0.0025 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 an | |
CVE-2026-12302 |
medium | 6.5 | 0.0025 | 2026-10-29 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox | |
CVE-2026-12303 |
medium | 4.3 | 0.0022 | 2026-10-29 | Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU compon | |
CVE-2026-12304 |
critical | 9.1 | 0.0019 | 2026-10-29 | Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fix | |
CVE-2026-12305 |
high | 7.5 | 0.0037 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12306 |
medium | 5.3 | 0.0026 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12307 |
medium | 5.3 | 0.0026 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12308 |
medium | 5.3 | 0.0026 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12309 |
medium | 6.5 | 0.0024 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12310 |
high | 7.5 | 0.0025 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12311 |
medium | 4.7 | 0.0019 | 2026-10-29 | Information disclosure, sandbox escape in the Security: Process Sandboxing component. This | |
CVE-2026-12312 |
high | 7.5 | 0.0025 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12313 |
medium | 4.7 | 0.0018 | 2026-10-29 | Information disclosure, sandbox escape in the Security: Process Sandboxing component. This | |
CVE-2026-12314 |
high | 7.5 | 0.0025 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12315 |
critical | 9.1 | 0.0025 | 2026-10-29 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox | |
CVE-2026-12316 |
critical | 9.1 | 0.0024 | 2026-10-29 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox | |
CVE-2026-12317 |
high | 7.5 | 0.0029 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 an | |
CVE-2026-12318 |
high | 7.3 | 0.0026 | 2026-10-29 | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fi | |
CVE-2026-12319 |
medium | 6.5 | 0.0021 | 2026-10-29 | Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in | |
CVE-2026-12320 |
medium | 4.3 | 0.0018 | 2026-10-29 | Information disclosure in the Password Manager component. This vulnerability was fixed in | |
CVE-2026-12321 |
medium | 5.4 | 0.0016 | 2026-10-29 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed | |
CVE-2026-12322 |
medium | 5.4 | 0.0021 | 2026-10-29 | Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 1 | |
CVE-2026-12323 |
medium | 5.4 | 0.0017 | 2026-10-29 | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox | |
CVE-2026-12324 |
high | 7.3 | 0.0021 | 2026-10-29 | Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability w | |
CVE-2026-12325 |
medium | 6.5 | 0.0023 | 2026-10-29 | Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Fir | |
CVE-2026-12326 |
— | — | 0.0036 | 2026-10-29 | Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed e | |
CVE-2026-12327 |
high | 8.1 | 0.0041 | 2026-10-29 | Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and | |
CVE-2026-12328 |
— | — | 0.0048 | 2026-10-29 | Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140. | |
CVE-2026-12329 |
— | — | 0.0031 | 2026-10-29 | Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox | |
CVE-2026-12330 |
medium | 5.4 | 0.0016 | 2026-10-29 | Incorrect boundary conditions in the Internationalization component. This vulnerability wa | |
CVE-2026-53899 |
medium | 6.5 | 0.0010 | 2026-10-29 | Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allow | |
CVE-2026-53900 |
medium | 4.3 | 0.0010 | 2026-10-29 | Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP | |
CVE-2026-9507 |
medium | 5.1 | 0.0040 | 2026-10-29 | A session fixation vulnerability has been identified in osTicket v1.18.2. This security fl | |
CVE-2026-0646 |
high | 8.7 | 0.0034 | 2026-10-29 | A denial-of-service security issue exists within the 1794-AENTR adapter due to improper me | |
CVE-2026-0647 |
high | 8.8 | 0.0043 | 2026-10-29 | An improper authentication security issue exists within the 1794-AENTR adapter's embedded | |
CVE-2026-10636 |
low | 3.7 | 0.0031 | 2026-10-29 | In Zephyr's IPv4 IGMP implementation, igmp_send() in subsys/net/ip/igmp.c read the network | |
CVE-2026-10637 |
high | 7.1 | 0.0030 | 2026-10-29 | subsys/net/ip/ipv6_mld.c:mld_send() read the packet interface via net_pkt_iface(pkt) after | |
CVE-2026-10638 |
high | 7.5 | 0.0035 | 2026-10-29 | subsys/net/ip/icmpv6.c reads the network interface from a net_pkt after that packet has be | |
CVE-2026-10639 |
medium | 4.8 | 0.0023 | 2026-10-29 | In Zephyr's native IPv4 stack, icmpv4_handle_echo_request() in subsys/net/ip/icmpv4.c buil | |
CVE-2026-10640 |
high | 7.1 | 0.0037 | 2026-10-29 | Zephyr's IPv6 Neighbor Discovery send paths (net_ipv6_send_na, net_ipv6_send_ns, net_ipv6_ | |
CVE-2026-11317 |
high | 8.7 | 0.0030 | 2026-10-29 | A denial of service security issue exists in the affected product. The security issue stem | |
CVE-2026-12398 |
high | 7.5 | 0.0089 | 2026-10-29 | A command injection vulnerability was found in galaxy_ng. The do_git_checkout() function i | |
CVE-2026-47684 |
high | 7.7 | 0.0022 | 2026-10-29 | Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, |