Category

Browsers

10,967 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10,967 results · Feed

High 7.3

CVE-2026-117890

JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117889

Incorrect boundary conditions in the JavaScript Engine component

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117887

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.1

CVE-2026-117886

Incorrect boundary conditions in the Graphics: Text component

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 5.4

CVE-2026-117888

Uninitialized memory in the Graphics: Canvas2D component

Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 6.3

CVE-2026-117885

Use-after-free in the Layout: Grid component

Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117884

Use-after-free in the Networking component

Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117881

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117883

Use-after-free in the DOM: HTML Parser component

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 6.3

CVE-2026-117882

Use-after-free in the Layout component

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 6.3

CVE-2026-117880

Use-after-free in the XML component

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117879

Incorrect boundary conditions in the Layout: Tables component

Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 6.3

CVE-2026-117878

Other issue, use-after-free in the Storage: IndexedDB component

Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 6.3

CVE-2026-117877

Use-after-free in the Layout: Text and Fonts component

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 6.3

CVE-2026-117876

Use-after-free in the Layout: Text and Fonts component

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 6.3

CVE-2026-117874

Use-after-free in the Internationalization component

Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 6.3

CVE-2026-117875

Use-after-free in the Layout: Scrolling and Overflow component

Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117871

Invalid pointer in the Graphics component

Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.1

CVE-2026-117873

Incorrect boundary conditions in the Audio/Video: Playback component

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117872

Use-after-free in the JavaScript: Standard Library component

Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117869

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Critical 9.6

CVE-2026-117868

Sandbox escape in the DOM: Networking component

Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117870

Use-after-free in the JavaScript Engine component

Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117867

Use-after-free in the Layout component

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 7.3

CVE-2026-117866

Privilege escalation due to use-after-free in the Graphics: Canvas2D component

Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 6.3

CVE-2026-117865

Use-after-free in the JavaScript: GC component

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.8

CVE-2026-117864

Sandbox escape in the Form Manager component

Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 6.5

CVE-2026-117863

Information disclosure due to uninitialized memory in the Audio/Video component

Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Critical 9.8

CVE-2026-117862

Privilege escalation due to incorrect boundary conditions in the Networking component

Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Critical 9.6

CVE-2026-117861

Sandbox escape in the DOM: Navigation component

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
High 8.1

CVE-2026-117860

Same-origin policy bypass in the DOM: Navigation component

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Oct 27, 2026
Medium 4.3

CVE-2026-113904

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 26, 2026
High 8.8

CVE-2026-113949

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
High 7.5

CVE-2026-112621 Public exploit

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
Medium 6.5

CVE-2026-112699

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and i…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
High 8.8

CVE-2026-112637

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 26, 2026
High 7.5

CVE-2026-86986

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
Medium 4.3

CVE-2026-112695

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 26, 2026
Medium 5.4

CVE-2026-113952

A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers

Oct 26, 2026
High 7.6

CVE-2026-112640

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 26, 2026