Hunt List
10,176 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-117981 |
9.8 | 0.0018 | NET NO AUTH LOW CX NO UI | Privilege escalation in the Toolkit component. This vulnerability was fixed in F | |
|
80
|
CVE-2026-117982 |
9.8 | 0.0018 | NET NO AUTH LOW CX NO UI | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was | |
|
79
|
CVE-2026-107846 |
9.3 | 0.0018 | NET NO AUTH LOW CX NO UI | bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsers. From 2.3 | |
|
78
|
CVE-2026-109772 |
9.1 | 0.0018 | NET NO AUTH LOW CX NO UI | Same-origin policy bypass in the DevTools component. This vulnerability was fixe | |
|
77
|
CVE-2026-118377 |
8.7 | 0.0018 | NET NO AUTH LOW CX NO UI | mews/pos through 2.0.0 contains an insufficient verification of data authenticit | |
|
75
|
CVE-2026-49834 |
7.5 | 0.0018 | NET NO AUTH LOW CX NO UI | sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2. | |
|
69
|
CVE-2026-117962 |
9.6 | 0.0018 | NET NO AUTH LOW CX | Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manage | |
|
69
|
CVE-2026-117985 |
9.6 | 0.0018 | NET NO AUTH LOW CX | Sandbox escape due to use-after-free in the Graphics component. This vulnerabili | |
|
69
|
CVE-2026-117988 |
9.6 | 0.0018 | NET NO AUTH LOW CX | Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL | |
|
69
|
CVE-2026-117990 |
9.6 | 0.0018 | NET NO AUTH LOW CX | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender c | |
|
69
|
CVE-2026-117997 |
9.6 | 0.0018 | NET NO AUTH LOW CX | Sandbox escape due to use-after-free in the Widget component. This vulnerability | |
|
68
|
CVE-2026-114177 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xp | |
|
68
|
CVE-2026-117932 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed i | |
|
68
|
CVE-2026-117953 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed i | |
|
68
|
CVE-2026-117956 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Invalid pointer in the Nimbus Desktop Client component. This vulnerability was f | |
|
68
|
CVE-2026-117964 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Use-after-free in the Panning and Zooming component. This vulnerability was fixe | |
|
68
|
CVE-2026-117969 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was | |
|
68
|
CVE-2026-117970 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Race condition in the Disability Access APIs component. This vulnerability was f | |
|
68
|
CVE-2026-117972 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Use-after-free in the Graphics component. This vulnerability was fixed in Firefo | |
|
68
|
CVE-2026-117973 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Use-after-free in the Networking: DNS component. This vulnerability was fixed in | |
|
68
|
CVE-2026-117975 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Sandbox escape due to invalid pointer in the Graphics: WebRender component. This | |
|
68
|
CVE-2026-117983 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Use-after-free in the Graphics component. This vulnerability was fixed in Firefo | |
|
68
|
CVE-2026-117984 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Incorrect boundary conditions in the Layout: Scrolling and Overflow component. T | |
|
68
|
CVE-2026-117986 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Use-after-free in the Graphics component. This vulnerability was fixed in Firefo | |
|
68
|
CVE-2026-117987 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Use-after-free in the Graphics component. This vulnerability was fixed in Firefo | |
|
68
|
CVE-2026-117989 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Use-after-free in the Graphics component. This vulnerability was fixed in Firefo | |
|
68
|
CVE-2026-117991 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Incorrect boundary conditions in the Layout: Text and Fonts component. This vuln | |
|
68
|
CVE-2026-117993 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Integer overflow in the Graphics: Text component. This vulnerability was fixed i | |
|
68
|
CVE-2026-117994 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in | |
|
68
|
CVE-2026-117995 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Privilege escalation in the DOM: UI Events & Focus Handling component. This vuln | |
|
68
|
CVE-2026-117999 |
8.8 | 0.0018 | NET NO AUTH LOW CX | Race condition in the IPC component. This vulnerability was fixed in Firefox 159 | |
|
68
|
CVE-2026-61546 |
8.8 | 0.0018 | NET NO AUTH LOW CX | AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants t | |
|
66
|
CVE-2026-44358 |
8.2 | 0.0018 | NET NO AUTH LOW CX | Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflo | |
|
66
|
CVE-2026-117955 |
8.1 | 0.0018 | NET NO AUTH LOW CX | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability | |
|
66
|
CVE-2026-117957 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Cryptographic issue in the WebRTC: Networking component. This vulnerability was | |
|
66
|
CVE-2026-117958 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Site isolation issue in the Networking: HTTP component. This vulnerability was f | |
|
66
|
CVE-2026-117959 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Site isolation issue in the DOM: Service Workers component. This vulnerability w | |
|
66
|
CVE-2026-117961 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Incorrect boundary conditions in the Layout: Text and Fonts component. This vuln | |
|
66
|
CVE-2026-117963 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Incorrect boundary conditions in the DOM: Service Workers component. This vulner | |
|
66
|
CVE-2026-117976 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Site isolation issue in the DOM: Navigation component. This vulnerability was fi | |
|
66
|
CVE-2026-117977 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Other issue in the Console component. This vulnerability was fixed in Firefox 15 | |
|
66
|
CVE-2026-117996 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Incorrect boundary conditions in the WebRTC component. This vulnerability was fi | |
|
66
|
CVE-2026-118000 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Information disclosure in the Networking: HTTP component. This vulnerability was | |
|
66
|
CVE-2026-118002 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Information disclosure due to race condition in the Networking component. This v | |
|
66
|
CVE-2026-118003 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Information disclosure in the Networking: DNS component. This vulnerability was | |
|
66
|
CVE-2026-118004 |
8.1 | 0.0018 | NET NO AUTH LOW CX | Incorrect boundary conditions in the CSS Transitions and Animations component. T | |
|
64
|
CVE-2026-42728 |
7.1 | 0.0018 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-42729 |
7.1 | 0.0018 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
57
|
CVE-2026-12034 |
8.3 | 0.0018 | NET NO AUTH | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Ch | |
|
55
|
CVE-2026-41021 |
7.5 | 0.0018 | NET NO AUTH | Eaton easyE4 uses an insufficiently strong password policy. An attacker who obta |