Category

Browsers

10,968 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3,578 results · Clear filters · Feed

High 8.1

CVE-2026-117912

Same-origin policy bypass in the CSS Parsing and Computation component

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117910

Invalid pointer in the JavaScript Engine component

Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117904

Use-after-free in the JavaScript: GC component

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117900

Use-after-free in the DOM: Editor component

Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117901

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117899

Use-after-free in the Networking: HTTP component

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117897

Incorrect boundary conditions in the Layout: Tables component

Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117892

Privilege escalation due to use-after-free in the WebRTC: Networking component

Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117891

Use-after-free in the JavaScript Engine: JIT component

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117890

JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117889

Incorrect boundary conditions in the JavaScript Engine component

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117887

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.1

CVE-2026-117886

Incorrect boundary conditions in the Graphics: Text component

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117884

Use-after-free in the Networking component

Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117881

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117883

Use-after-free in the DOM: HTML Parser component

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117879

Incorrect boundary conditions in the Layout: Tables component

Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117871

Invalid pointer in the Graphics component

Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.1

CVE-2026-117873

Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117872

Use-after-free in the JavaScript: Standard Library component

Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117869

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117870

Use-after-free in the JavaScript Engine component

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117867

Use-after-free in the Layout component

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117866

Privilege escalation due to use-after-free in the Graphics: Canvas2D component

Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117864

Sandbox escape in the Form Manager component

Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.1

CVE-2026-117860

Same-origin policy bypass in the DOM: Navigation component

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-113949

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
High 7.5

CVE-2026-112621 Public exploit

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
High 8.8

CVE-2026-112637

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 26, 2026
High 7.5

CVE-2026-86986

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
High 7.6

CVE-2026-112640

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 26, 2026
High 8.8

CVE-2026-112626

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 26, 2026
High 8.8

CVE-2026-112651

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
High 7.5

CVE-2026-86974

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
High 8.8

CVE-2026-112655

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 26, 2026
High 8.8

CVE-2026-112659

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and …

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
High 8.8

CVE-2026-112623

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
High 7.5

CVE-2026-112654

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
High 8.8

CVE-2026-112639

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
High 8.8

CVE-2026-112697

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 26, 2026