Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,390 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-117981 | Not scored | Privilege escalation in the Toolkit component | Oct 27, 2026 |
| CVE-2026-117980 | Not scored | Use-after-free in the Graphics component | Oct 27, 2026 |
| CVE-2026-117979 | Not scored | Incorrect boundary conditions in the Graphics: WebRender component | Oct 27, 2026 |
| CVE-2026-117978 | Not scored | Incorrect boundary conditions in the Graphics component | Oct 27, 2026 |
| CVE-2026-117977 | Not scored | Other issue in the Console component | Oct 27, 2026 |
| CVE-2026-117976 | Not scored | Site isolation issue in the DOM: Navigation component | Oct 27, 2026 |
| CVE-2026-117975 | Not scored | Sandbox escape due to invalid pointer in the Graphics: WebRender component | Oct 27, 2026 |
| CVE-2026-117974 | Not scored | Use-after-free in the XML component | Oct 27, 2026 |
| CVE-2026-117973 | Not scored | Use-after-free in the Networking: DNS component | Oct 27, 2026 |
| CVE-2026-117972 | Not scored | Use-after-free in the Graphics component | Oct 27, 2026 |
| CVE-2026-117971 | Not scored | Sandbox escape due to use-after-free in the Print Preview component | Oct 27, 2026 |
| CVE-2026-117970 | Not scored | Race condition in the Disability Access APIs component | Oct 27, 2026 |
| CVE-2026-117969 | Not scored | Invalid pointer in the JavaScript Engine: JIT component | Oct 27, 2026 |
| CVE-2026-117968 | Not scored | Use-after-free in the DOM: Core & HTML component | Oct 27, 2026 |
| CVE-2026-117967 | Not scored | Mitigation bypass in the DOM: Security component | Oct 27, 2026 |
| CVE-2026-117966 | Not scored | Site isolation issue in the Networking: HTTP component | Oct 27, 2026 |
| CVE-2026-117965 | Not scored | Same-origin policy bypass in the Address Bar component | Oct 27, 2026 |
| CVE-2026-117964 | Not scored | Use-after-free in the Panning and Zooming component | Oct 27, 2026 |
| CVE-2026-117963 | Not scored | Incorrect boundary conditions in the DOM: Service Workers component | Oct 27, 2026 |
| CVE-2026-117962 | Not scored | Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component | Oct 27, 2026 |
| CVE-2026-117961 | Not scored | Incorrect boundary conditions in the Layout: Text and Fonts component | Oct 27, 2026 |
| CVE-2026-117960 | Not scored | Spoofing issue in the DOM: Core & HTML component | Oct 27, 2026 |
| CVE-2026-117959 | Not scored | Site isolation issue in the DOM: Service Workers component | Oct 27, 2026 |
| CVE-2026-117958 | Not scored | Site isolation issue in the Networking: HTTP component | Oct 27, 2026 |
| CVE-2026-117957 | Not scored | Cryptographic issue in the WebRTC: Networking component | Oct 27, 2026 |
| CVE-2026-117956 | Not scored | Invalid pointer in the Nimbus Desktop Client component | Oct 27, 2026 |
| CVE-2026-117955 | Not scored | JIT miscompilation in the JavaScript: WebAssembly component | Oct 27, 2026 |
| CVE-2026-117954 | Not scored | Use-after-free in the Layout: Positioned component | Oct 27, 2026 |
| CVE-2026-117953 | Not scored | Use-after-free in the DOM: Core & HTML component | Oct 27, 2026 |
| CVE-2026-117952 | Not scored | Uninitialized memory in the Networking component | Oct 27, 2026 |
| CVE-2026-117951 | Not scored | Use-after-free in the DOM: Core & HTML component | Oct 27, 2026 |
| CVE-2026-117950 | Not scored | Incorrect boundary conditions in the DOM: Core & HTML component | Oct 27, 2026 |
| CVE-2026-117949 | Not scored | Use-after-free in the DOM: Core & HTML component | Oct 27, 2026 |
| CVE-2026-117948 | Not scored | Use-after-free in the SVG component | Oct 27, 2026 |
| CVE-2026-117947 | Not scored | Use-after-free in the XML component | Oct 27, 2026 |
| CVE-2026-117946 | Not scored | Incorrect boundary conditions in the JavaScript Engine component | Oct 27, 2026 |
| CVE-2026-117945 | Not scored | Incorrect boundary conditions in the XML component | Oct 27, 2026 |
| CVE-2026-117944 | Not scored | Use-after-free in the Layout component | Oct 27, 2026 |
| CVE-2026-117943 | Not scored | Use-after-free in the DOM: Core & HTML component | Oct 27, 2026 |
| CVE-2026-117942 | Not scored | Incorrect boundary conditions in the JavaScript Engine: JIT component | Oct 27, 2026 |
| CVE-2026-117941 | Not scored | Use-after-free in the DOM: CSS Object Model component | Oct 27, 2026 |
| CVE-2026-117940 | Not scored | Use-after-free in the DOM: Core & HTML component | Oct 27, 2026 |
| CVE-2026-117939 | Not scored | Use-after-free in the XML component | Oct 27, 2026 |
| CVE-2026-117938 | Not scored | Use-after-free in the Layout component | Oct 27, 2026 |
| CVE-2026-117937 | Not scored | Invalid pointer in the JavaScript Engine component | Oct 27, 2026 |
| CVE-2026-117936 | Not scored | Use-after-free in the DOM: Core & HTML component | Oct 27, 2026 |
| CVE-2026-117935 | Not scored | Use-after-free in the DOM: Bindings (WebIDL) component | Oct 27, 2026 |
| CVE-2026-117934 | Not scored | Use-after-free in the Layout component | Oct 27, 2026 |
| CVE-2026-117933 | Not scored | Frame poisoning in the CSS Parsing and Computation component | Oct 27, 2026 |
| CVE-2026-117932 | Not scored | Use-after-free in the DOM: Core & HTML component | Oct 27, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.