Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,390 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-117507 | 5.3 Medium | a2aproject a2a-java TaskManager.saveTaskEvent race condition | Oct 27, 2026 |
| CVE-2026-117506 | 5.3 Medium | a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption | Oct 27, 2026 |
| CVE-2026-117604 | 8.7 High | Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback | Oct 27, 2026 |
| CVE-2026-117505 | 5.3 Medium | a2aproject a2a-java ChildQueue queue.offer resource consumption | Oct 27, 2026 |
| CVE-2026-105987 | 5.1 Medium | Stored XSS in KGS Software tia Viewer | Oct 27, 2026 |
| CVE-2026-118027 | Not scored | Frame poisoning in the Layout component | Oct 27, 2026 |
| CVE-2026-118026 | Not scored | Invalid pointer in the JavaScript: GC component | Oct 27, 2026 |
| CVE-2026-118025 | Not scored | Other issue in the SVG component | Oct 27, 2026 |
| CVE-2026-118024 | Not scored | Use-after-free in the Graphics: Text component | Oct 27, 2026 |
| CVE-2026-118023 | Not scored | Sandbox escape due to use-after-free in the Graphics: WebRender component | Oct 27, 2026 |
| CVE-2026-118022 | Not scored | Sandbox escape due to use-after-free in the Disability Access APIs component | Oct 27, 2026 |
| CVE-2026-118021 | Not scored | Sandbox escape due to use-after-free in the XPCOM component | Oct 27, 2026 |
| CVE-2026-118020 | Not scored | Use-after-free in the Layout component | Oct 27, 2026 |
| CVE-2026-118019 | Not scored | Race condition, use-after-free in the DOM: File component | Oct 27, 2026 |
| CVE-2026-118018 | Not scored | Spoofing issue in the Downloads component in Firefox for Android | Oct 27, 2026 |
| CVE-2026-118017 | Not scored | Use-after-free in the SVG component | Oct 27, 2026 |
| CVE-2026-118016 | Not scored | Use-after-free in the DOM: Core & HTML component | Oct 27, 2026 |
| CVE-2026-118015 | Not scored | Use-after-free in the DOM: Core & HTML component | Oct 27, 2026 |
| CVE-2026-118014 | Not scored | Use-after-free in the JavaScript Engine: JIT component | Oct 27, 2026 |
| CVE-2026-118013 | Not scored | Use-after-free in the Layout: Images, Video, and HTML Frames component | Oct 27, 2026 |
| CVE-2026-118012 | Not scored | Use-after-free in the DOM: Animation component | Oct 27, 2026 |
| CVE-2026-118011 | Not scored | Frame poisoning in the CSS Parsing and Computation component | Oct 27, 2026 |
| CVE-2026-118010 | Not scored | Use-after-free in the Disability Access APIs component | Oct 27, 2026 |
| CVE-2026-118009 | Not scored | Integer overflow, use-after-free in the Graphics: Text component | Oct 27, 2026 |
| CVE-2026-118008 | 8.8 High | Privilege escalation in the DOM: Navigation component | Oct 27, 2026 |
| CVE-2026-118007 | Not scored | Use-after-free in the JavaScript: GC component | Oct 27, 2026 |
| CVE-2026-118006 | Not scored | Privilege escalation due to use-after-free in the WebRTC: Signaling component | Oct 27, 2026 |
| CVE-2026-118005 | Not scored | Use-after-free in the WebRTC: Signaling component | Oct 27, 2026 |
| CVE-2026-118004 | Not scored | Incorrect boundary conditions in the CSS Transitions and Animations component | Oct 27, 2026 |
| CVE-2026-118003 | Not scored | Information disclosure in the Networking: DNS component | Oct 27, 2026 |
| CVE-2026-118002 | Not scored | Information disclosure due to race condition in the Networking component | Oct 27, 2026 |
| CVE-2026-118000 | Not scored | Information disclosure in the Networking: HTTP component | Oct 27, 2026 |
| CVE-2026-117999 | Not scored | Race condition in the IPC component | Oct 27, 2026 |
| CVE-2026-117998 | Not scored | Mitigation bypass in the DOM: Push Subscriptions component | Oct 27, 2026 |
| CVE-2026-117997 | Not scored | Sandbox escape due to use-after-free in the Widget component | Oct 27, 2026 |
| CVE-2026-117996 | Not scored | Incorrect boundary conditions in the WebRTC component | Oct 27, 2026 |
| CVE-2026-117995 | Not scored | Privilege escalation in the DOM: UI Events & Focus Handling component | Oct 27, 2026 |
| CVE-2026-117994 | Not scored | Use-after-free in the JavaScript: GC component | Oct 27, 2026 |
| CVE-2026-117993 | Not scored | Integer overflow in the Graphics: Text component | Oct 27, 2026 |
| CVE-2026-117992 | Not scored | Information disclosure in the CSS Parsing and Computation component | Oct 27, 2026 |
| CVE-2026-117991 | Not scored | Incorrect boundary conditions in the Layout: Text and Fonts component | Oct 27, 2026 |
| CVE-2026-117990 | Not scored | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component | Oct 27, 2026 |
| CVE-2026-117989 | Not scored | Use-after-free in the Graphics component | Oct 27, 2026 |
| CVE-2026-117988 | Not scored | Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component | Oct 27, 2026 |
| CVE-2026-117987 | Not scored | Use-after-free in the Graphics component | Oct 27, 2026 |
| CVE-2026-117986 | Not scored | Use-after-free in the Graphics component | Oct 27, 2026 |
| CVE-2026-117985 | Not scored | Sandbox escape due to use-after-free in the Graphics component | Oct 27, 2026 |
| CVE-2026-117984 | Not scored | Incorrect boundary conditions in the Layout: Scrolling and Overflow component | Oct 27, 2026 |
| CVE-2026-117983 | Not scored | Use-after-free in the Graphics component | Oct 27, 2026 |
| CVE-2026-117982 | Not scored | Invalid pointer in the JavaScript Engine: JIT component | Oct 27, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.