Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

39 408
matching records · page 157 of 1577
CVE-2026-117910 NOT SCORED No CVSS score available

Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117909 NOT SCORED No CVSS score available

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117908 NOT SCORED No CVSS score available

Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117907 NOT SCORED No CVSS score available

Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117906 NOT SCORED No CVSS score available

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117905 NOT SCORED No CVSS score available

Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117904 NOT SCORED No CVSS score available

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117903 NOT SCORED No CVSS score available

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117902 NOT SCORED No CVSS score available

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117901 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117900 NOT SCORED No CVSS score available

Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117899 NOT SCORED No CVSS score available

Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117898 NOT SCORED No CVSS score available

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117897 NOT SCORED No CVSS score available

Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117896 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117895 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117894 NOT SCORED No CVSS score available

Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117893 NOT SCORED No CVSS score available

Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117892 NOT SCORED No CVSS score available

Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117891 NOT SCORED No CVSS score available

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117890 NOT SCORED No CVSS score available

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117889 NOT SCORED No CVSS score available

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117888 NOT SCORED No CVSS score available

Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117887 NOT SCORED No CVSS score available

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →
CVE-2026-117886 NOT SCORED No CVSS score available

Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Published: 27 Oct 2026 Updated: 27 Oct 2026 View details →