Vulnerability index

Browse CVEs

392 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Firefox CRITICAL 9.8
CVE-2026-16388

Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Fix: 153.0 / 153.0.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.1
CVE-2026-16380

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Fix: 153.0 / 153.0.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.1
CVE-2026-16381

Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thu…

Fix: 140.13.0 / 153.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16375

Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunder…

Fix: 140.13.0 / 153.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16377

Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.…

Fix: 140.13.0 / 153.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16369

Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thun…

Fix: 140.13.0 / 153.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.1
CVE-2026-16370

Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Fix: 153.0 / 153.0.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 10.0
CVE-2026-16367

Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Fix: 153.0 / 153.0.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16368

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird …

Fix: 140.13.0 / 153.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16361

Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort …

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16355

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thun…

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16356

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefo…

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16357

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunder…

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16358

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thund…

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16360

Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we …

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16363

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Th…

Fix: 140.13.0 / 153.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.1
CVE-2026-16359

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13,…

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.1
CVE-2026-16364

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Fix: 153.0 / 153.0.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16349

Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thun…

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16350

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.1…

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16351

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 1…

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16352

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefo…

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-16353

Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunder…

Fix: 115.38.0 / 140.13.0+
Fix from $2,300 2026-07-21
Firefox CRITICAL 9.8
CVE-2026-14241

Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of…

Mitigation only
Fix from $2,300 2026-06-30
Firefox CRITICAL 9.1
CVE-2026-12315

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 1…

Fix: 140.12.0 / 152.0.0+
Fix from $2,300 2026-06-16
Firefox CRITICAL 9.1
CVE-2026-12316

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Fix: 152.0.0+
Fix from $2,300 2026-06-16
Firefox CRITICAL 9.1
CVE-2026-12304

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and…

Fix: 140.12.0 / 152.0.0+
Fix from $2,300 2026-06-16
Firefox CRITICAL 9.8
CVE-2026-12293

Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Fix: 152.0.0+
Fix from $2,300 2026-06-16
Firefox CRITICAL 9.6
CVE-2026-12294

Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, a…

Fix: 115.37.0 / 140.12.0+
Fix from $2,300 2026-06-16
Firefox CRITICAL 9.6
CVE-2026-12295

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152…

Fix: 115.37.0 / 140.12.0+
Fix from $2,300 2026-06-16