Export limit exceeded: 419083 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1703 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-117874 1 Mozilla 1 Firefox 2026-10-28 7.5 High
Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117878 1 Mozilla 1 Firefox 2026-10-28 7.5 High
Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117902 1 Mozilla 2 Firefox, Thunderbird 2026-10-28 7.5 High
Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117900 1 Mozilla 2 Firefox, Thunderbird 2026-10-28 7.5 High
Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117951 1 Mozilla 1 Firefox 2026-10-28 7.5 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117916 1 Mozilla 1 Firefox 2026-10-28 7.5 High
Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117954 1 Mozilla 1 Firefox 2026-10-27 7.5 High
Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118007 1 Mozilla 1 Firefox 2026-10-27 7.5 High
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-117892 1 Mozilla 1 Firefox 2026-10-27 7.5 High
Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118005 1 Mozilla 1 Firefox 2026-10-27 7.5 High
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118010 1 Mozilla 1 Firefox 2026-10-27 7.5 High
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118019 1 Mozilla 1 Firefox 2026-10-27 6.1 Medium
Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118020 1 Mozilla 1 Firefox 2026-10-27 6.1 Medium
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118023 1 Mozilla 1 Firefox 2026-10-27 6.1 Medium
Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-117887 1 Mozilla 1 Firefox 2026-10-27 7.5 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117971 1 Mozilla 1 Firefox 2026-10-27 6.1 Medium
Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117974 1 Mozilla 1 Firefox 2026-10-27 6.1 Medium
Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117949 1 Mozilla 1 Firefox 2026-10-27 7.5 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-113869 1 Mozilla 1 Thunderbird 2026-10-27 5.4 Medium
When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free and a potentially exploitable crash. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.6.
CVE-2026-118027 1 Mozilla 1 Firefox 2026-10-27 3.4 Low
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.