Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
153,569 matching · page 104/3072Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-65104(opens NVD record) | High | 7.1 | NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure. | Oct 13, 2026 |
| CVE-2026-65103(opens NVD record) | High | 8.1 | NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service. | Oct 13, 2026 |
| CVE-2026-65101(opens NVD record) | High | 8.6 | NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure. | Oct 13, 2026 |
| CVE-2026-109976(opens NVD record) | Medium | 4.7 | A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF_UNIX client connects to the data socket without a bound address, due to an integer underflow in the getpeername result handling. This causes a denial of service, preventing LUKS disk decryption from completing during boot. | Oct 13, 2026 |
| CVE-2026-109833(opens NVD record) | Medium | 5.9 | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of compacting the peek buffer. A remote attacker who can reach an enabled VNC TLS listener and trigger a peek/read size mismatch can cause an out-of-bounds write, leading to denial of service. | Oct 13, 2026 |
| CVE-2026-109783(opens NVD record) | Unscored | — | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109782(opens NVD record) | Unscored | — | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109781(opens NVD record) | Medium | 6.5 | Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109780(opens NVD record) | Unscored | — | Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109779(opens NVD record) | Medium | 4.2 | Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109778(opens NVD record) | High | 8.8 | Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109777(opens NVD record) | Medium | 4.3 | Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109776(opens NVD record) | Medium | 4.2 | Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109775(opens NVD record) | Medium | 6.5 | Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109774(opens NVD record) | Unscored | — | Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109773(opens NVD record) | Medium | 6.5 | Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109772(opens NVD record) | Unscored | — | Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109771(opens NVD record) | Medium | 4.3 | Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109770(opens NVD record) | Medium | 6.1 | Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109769(opens NVD record) | Medium | 4.3 | Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109768(opens NVD record) | Medium | 6.5 | Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109767(opens NVD record) | Medium | 4.3 | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109766(opens NVD record) | High | 8.1 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109765(opens NVD record) | Medium | 4.2 | Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109764(opens NVD record) | Medium | 5.4 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109763(opens NVD record) | Unscored | — | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109762(opens NVD record) | High | 8.8 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109761(opens NVD record) | Medium | 5.4 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109760(opens NVD record) | High | 8.1 | Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109759(opens NVD record) | High | 8.1 | Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109757(opens NVD record) | High | 8.3 | Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109756(opens NVD record) | High | 8.8 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109755(opens NVD record) | Critical | 9.6 | Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109754(opens NVD record) | High | 8.1 | Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109753(opens NVD record) | High | 8.1 | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109752(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109751(opens NVD record) | Medium | 4.3 | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109750(opens NVD record) | Critical | 9.6 | Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109749(opens NVD record) | Medium | 5.4 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109748(opens NVD record) | Medium | 5.4 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109747(opens NVD record) | High | 7.3 | Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109746(opens NVD record) | High | 7.3 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109745(opens NVD record) | Critical | 9.6 | Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109744(opens NVD record) | High | 8.1 | Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109743(opens NVD record) | High | 8.8 | Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109742(opens NVD record) | Medium | 4.3 | Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109741(opens NVD record) | Medium | 5.4 | Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109740(opens NVD record) | Critical | 9.6 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109739(opens NVD record) | High | 8.8 | Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109738(opens NVD record) | Medium | 5.4 | Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |