Category

Browsers

10,967 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10,967 results · Feed

Critical 9.6

CVE-2026-95284

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arb…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 29, 2026
Critical 9.6

CVE-2026-95349

Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 29, 2026
Critical 9.6

CVE-2026-95281

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arb…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 29, 2026
Critical 9.6

CVE-2026-95357

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potential…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 29, 2026
Critical 9.6

CVE-2026-95339

Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary …

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 29, 2026
Critical 9.6

CVE-2026-95350

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arb…

Google Chrome chromium chromium Browsers Debian Wolfi

Sep 29, 2026
High 8.8

CVE-2026-100831

Use-after-free in the DOM: UI Events & Focus Handling component

Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 8.8

CVE-2026-100832

Use-after-free in the Graphics: Canvas2D component

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

Mozilla Firefox Thunderbird thunderbird Browsers Debian

Sep 29, 2026
High 8.1

CVE-2026-100830

Mitigation bypass in the DOM: Navigation component

Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Critical 9.6

CVE-2026-100829

Mitigation bypass in the DOM: Security component

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Medium 6.5

CVE-2026-100826

Denial-of-service in the Storage: StorageManager component

Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Critical 9.6

CVE-2026-100828

Mitigation bypass in the Bookmarks & History component

Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 8.8

CVE-2026-100825

Use-after-free in the JavaScript Engine: JIT component

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 8.8

CVE-2026-100824

Privilege escalation in the Places component

Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Medium 5.4

CVE-2026-100823

Spoofing issue in the Downloads component in Firefox for Android

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157.

Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu

Sep 29, 2026
Medium 4.7

CVE-2026-100821

Site isolation issue in the Panning and Zooming component

Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Medium 5.4

CVE-2026-100822

Spoofing issue in the Networking: HTTP component

Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Critical 9.6

CVE-2026-100819

Sandbox escape due to incorrect boundary conditions in the XPCOM component

Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 8.8

CVE-2026-100820

Privilege escalation in the Address Bar component

Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Critical 9.6

CVE-2026-100818

Sandbox escape due to use-after-free in the Widget: Gtk component

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Medium 5.4

CVE-2026-100817

Other issue in the JavaScript: WebAssembly component

Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu

Sep 29, 2026
High 8.1

CVE-2026-100816

Site isolation issue in the DOM: Networking component

Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 8.8

CVE-2026-100814

Incorrect boundary conditions in the JavaScript Engine: JIT component

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 8.8

CVE-2026-100815

Use-after-free in the CSS Parsing and Computation component

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 8.8

CVE-2026-100813

Invalid pointer in the JavaScript Engine: JIT component

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu

Sep 29, 2026
Medium 6.5

CVE-2026-100812

Denial-of-service in the Graphics component

Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Critical 9.8

CVE-2026-100810

Other issue in the DevTools component

Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu

Sep 29, 2026
Critical 9.6

CVE-2026-100811

Sandbox escape due to use-after-free in the DOM: Core & HTML component

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 8.1

CVE-2026-100809

Same-origin policy bypass in the DevTools component

Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 8.8

CVE-2026-100807

Privilege escalation in the DOM: Service Workers component

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 8.8

CVE-2026-100808

Mitigation bypass in the DOM: Service Workers component

Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Medium 4.3

CVE-2026-100806

Uninitialized memory in the Graphics: WebGPU component

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 7.5

CVE-2026-100805

Race condition, use-after-free in the Audio/Video component

Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu

Sep 29, 2026
High 8.1

CVE-2026-100803

Same-origin policy bypass in the WebExtensions component

Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Critical 9.6

CVE-2026-100804

Sandbox escape due to use-after-free in the Preferences: Backend component

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu

Sep 29, 2026
Medium 4.3

CVE-2026-100802

Uninitialized memory in the Graphics: WebGPU component

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu

Sep 29, 2026
High 8.8

CVE-2026-100801

Privilege escalation in the DLL Services component

Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 159, Firefox ESR 153.6, Thunderbird 159, Thunderbird 153.6, Firefox 157, and Firefox ESR 140…

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Critical 9.6

CVE-2026-100800

Sandbox escape due to use-after-free in the Disability Access APIs component

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
High 8.1

CVE-2026-100798

Cryptography misuse in Storage: Quota Manager component

Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu

Sep 29, 2026
Medium 4.3

CVE-2026-100799

Uninitialized memory in the Graphics: WebGPU component

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu

Sep 29, 2026