Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
77,932 matching · page 149/1559Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-109764(opens NVD record) | Medium | 5.4 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109763(opens NVD record) | Unscored | — | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109762(opens NVD record) | High | 8.8 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109761(opens NVD record) | Medium | 5.4 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109760(opens NVD record) | High | 8.1 | Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109759(opens NVD record) | High | 8.1 | Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109757(opens NVD record) | High | 8.3 | Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109756(opens NVD record) | High | 8.8 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109755(opens NVD record) | Critical | 9.6 | Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109754(opens NVD record) | High | 8.1 | Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109753(opens NVD record) | High | 8.1 | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109752(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109751(opens NVD record) | Medium | 4.3 | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109750(opens NVD record) | Critical | 9.6 | Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109749(opens NVD record) | Medium | 5.4 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109748(opens NVD record) | Medium | 5.4 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109747(opens NVD record) | High | 7.3 | Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109746(opens NVD record) | High | 7.3 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109745(opens NVD record) | Critical | 9.6 | Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109744(opens NVD record) | High | 8.1 | Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109743(opens NVD record) | High | 8.8 | Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109742(opens NVD record) | Medium | 4.3 | Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109741(opens NVD record) | Medium | 5.4 | Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109740(opens NVD record) | Critical | 9.6 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109739(opens NVD record) | High | 8.8 | Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109738(opens NVD record) | Medium | 5.4 | Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109737(opens NVD record) | High | 8.1 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109736(opens NVD record) | High | 8.1 | Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109735(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |
| CVE-2026-109734(opens NVD record) | High | 8.1 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109733(opens NVD record) | High | 8.1 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109732(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109731(opens NVD record) | Medium | 5.4 | Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109730(opens NVD record) | High | 8.8 | Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109729(opens NVD record) | Medium | 5.4 | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109728(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109727(opens NVD record) | Medium | 5.4 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109726(opens NVD record) | Medium | 5.4 | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109725(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109724(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109723(opens NVD record) | Medium | 5.4 | Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109722(opens NVD record) | High | 8.1 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109721(opens NVD record) | Medium | 5.4 | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109720(opens NVD record) | High | 7.1 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109719(opens NVD record) | Medium | 4.2 | Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109718(opens NVD record) | Medium | 5.4 | Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109717(opens NVD record) | Medium | 5.4 | Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109716(opens NVD record) | High | 8.1 | Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109715(opens NVD record) | High | 8.1 | Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | Oct 13, 2026 |
| CVE-2026-109714(opens NVD record) | Medium | 5.4 | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | Oct 13, 2026 |