CVE Database

160723+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-124931

Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124930
4.3 MEDIUM

Information disclosure in the Address Bar component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124929
4.3 MEDIUM

Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124928

Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

Nov 10, 2026
CVE-2026-124927

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124926
8.8 HIGH

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124925
4.3 MEDIUM

Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

Nov 10, 2026
CVE-2026-124924
8.8 HIGH

Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124923

Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

Nov 10, 2026
CVE-2026-124922
8.8 HIGH

Use-after-free in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124921

Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

Nov 10, 2026
CVE-2026-124920

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

Nov 10, 2026
CVE-2026-124919
8.8 HIGH

Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124918
8.8 HIGH

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and …

Nov 10, 2026
CVE-2026-124917
9.6 CRITICAL

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124915
8.8 HIGH

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124914

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124913

Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124912

Spoofing issue in the DOM: Security component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124911

Clickjacking issue in the Autofill component in Firefox for Android. This vulnerability was fixed in Firefox 160.

Nov 10, 2026
CVE-2026-124910

Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124909
4.3 MEDIUM

Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124908
8.8 HIGH

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

Nov 10, 2026
CVE-2026-124907
8.8 HIGH

Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and …

Nov 10, 2026
CVE-2026-124906
8.8 HIGH

Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124905

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124904
8.8 HIGH

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

Nov 10, 2026
CVE-2026-124903
9.6 CRITICAL

Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and …

Nov 10, 2026
CVE-2026-124902

Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird …

Nov 10, 2026
CVE-2026-124901

Other issue in the Networking: JAR component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124900
9.6 CRITICAL

Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

Nov 10, 2026
CVE-2026-124899
8.8 HIGH

Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird …

Nov 10, 2026
CVE-2026-124898
8.8 HIGH

Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124897
8.8 HIGH

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124896

Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124895
8.8 HIGH

Use-after-free in the Storage: localStorage & sessionStorage component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird …

Nov 10, 2026
CVE-2026-124894
8.8 HIGH

Use-after-free in the Networking: Cookies component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124893
8.8 HIGH

Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124892
8.8 HIGH

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124891
8.8 HIGH

Incorrect boundary conditions in the DOM: Selection component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124890
8.8 HIGH

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird …

Nov 10, 2026
CVE-2026-124889
8.8 HIGH

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124888
8.8 HIGH

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124887
8.8 HIGH

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124886

Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124885
8.8 HIGH

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124884
8.8 HIGH

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124883
8.8 HIGH

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

Nov 10, 2026
CVE-2026-124882
8.8 HIGH

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird …

Nov 10, 2026
CVE-2026-124881
8.8 HIGH

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird …

Nov 10, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Website Scanner Port Scanner

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →
Sucuri Sucuri → Website firewall, malware cleanup & monitoring NordPass NordPass → Password manager with breach alerts Malwarebytes Malwarebytes → Anti-malware for Windows, Mac and phones, 25% off Contabo Contabo → Cheap VPS & dedicated servers, EU/US/Asia
Vultr Vultr → Cloud VPS in 30+ locations, hourly billing NordVPN NordVPN → Hide your IP, servers in 120+ countries Surfshark Surfshark → Unlimited devices, from ~$2/mo

Affiliate links: we may earn a commission, your price stays the same.