Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
71,167 matching · page 127/1424Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-109751(opens NVD record) | Medium | 4.3 | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109750(opens NVD record) | Critical | 9.6 | Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109749(opens NVD record) | Medium | 5.4 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109748(opens NVD record) | Medium | 5.4 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109747(opens NVD record) | High | 7.3 | Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109746(opens NVD record) | High | 7.3 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109745(opens NVD record) | Critical | 9.6 | Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109744(opens NVD record) | High | 8.1 | Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109743(opens NVD record) | High | 8.8 | Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109742(opens NVD record) | Medium | 4.3 | Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109741(opens NVD record) | Medium | 5.4 | Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109740(opens NVD record) | Critical | 9.6 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109739(opens NVD record) | High | 8.8 | Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109738(opens NVD record) | Medium | 5.4 | Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109737(opens NVD record) | High | 8.1 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109736(opens NVD record) | High | 8.1 | Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109735(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109734(opens NVD record) | High | 8.1 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109733(opens NVD record) | High | 8.1 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109732(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109731(opens NVD record) | Medium | 5.4 | Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109730(opens NVD record) | High | 8.8 | Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109729(opens NVD record) | Medium | 5.4 | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109728(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109727(opens NVD record) | Medium | 5.4 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109726(opens NVD record) | Medium | 5.4 | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109725(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109724(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109723(opens NVD record) | Medium | 5.4 | Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109722(opens NVD record) | High | 8.1 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109721(opens NVD record) | Medium | 5.4 | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109720(opens NVD record) | High | 7.1 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109719(opens NVD record) | Medium | 4.2 | Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109718(opens NVD record) | Medium | 5.4 | Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109717(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109716(opens NVD record) | High | 8.1 | Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109715(opens NVD record) | High | 8.1 | Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109714(opens NVD record) | Medium | 5.4 | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109713(opens NVD record) | Medium | 5.4 | Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109712(opens NVD record) | High | 7.1 | Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109711(opens NVD record) | Medium | 5.4 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109710(opens NVD record) | Medium | 5.4 | Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109709(opens NVD record) | High | 8.8 | Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109708(opens NVD record) | Critical | 9.6 | Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109707(opens NVD record) | Critical | 9.6 | Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109706(opens NVD record) | Medium | 5.4 | Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109705(opens NVD record) | Critical | 9.6 | Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109704(opens NVD record) | High | 8.8 | Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109407(opens NVD record) | Low | 3.1 | A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redemption. Such manipulation of the argument couponId leads to race condition. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is assessed as difficult. The vendor deleted the GitHub issue for this vulnerability without any explanation. | Oct 13, 2026 |
| CVE-2026-109406(opens NVD record) | Medium | 5.4 | A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amount/pay_amount causes business logic errors. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation. | Oct 13, 2026 |