Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.8Integer overflow in the Networking: JAR component.Vuln · CVE-2026-8956 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.6%May 19, 2026
High8.8Privilege escalation in the DOM: Workers component.Vuln · CVE-2026-8955 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.4%May 19, 2026
High7.5Incorrect boundary conditions, integer overflow in the Audio/Video component.Vuln · CVE-2026-8954 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.4%May 19, 2026
Critical9.6Sandbox escape due to use-after-free in the Disability Access APIs component.Vuln · CVE-2026-8953 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.5%May 19, 2026
High8.8Privilege escalation in the Application Update component.Vuln · CVE-2026-8952 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.4%May 19, 2026
Medium6.5Spoofing issue in the Toolbar component in Firefox for Android.Vuln · CVE-2026-8951 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · Android, FirefoxEPSS 0.3%May 19, 2026
Critical9.3Same-origin policy bypass in the Networking: HTTP component.Vuln · CVE-2026-8950 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.2%May 19, 2026
High7.5Integer overflow in the Widget: Win32 component.Vuln · CVE-2026-8949 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · Firefox, WindowsEPSS 0.6%May 19, 2026
Critical9.1Same-origin policy bypass in the DOM: Networking component.Vuln · CVE-2026-8948 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.5%May 19, 2026
High7.3Use-after-free in the DOM: Bindings (WebIDL) component.Vuln · CVE-2026-8947 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.4%May 19, 2026
High7.5Incorrect boundary conditions in the Audio/Video: Web Codecs component.Vuln · CVE-2026-8946 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.6%May 19, 2026
High7.5Sandbox escape in Firefox and Firefox Focus for Android.Vuln · CVE-2026-8945 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · Android, FirefoxEPSS 0.4%May 19, 2026
Critical9.8Sandbox escape in the Profile Backup component.Vuln · CVE-2026-8401 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 12, 2026
Medium5.3Other issue in the JavaScript Engine component.Vuln · CVE-2026-8391 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 12, 2026
High7.3Use-after-free in the JavaScript: WebAssembly component.Vuln · CVE-2026-8390 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 12, 2026
High8.8JIT miscompilation in the JavaScript Engine: JIT component.Vuln · CVE-2026-8389 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 12, 2026
Medium6.5Incorrect boundary conditions in the JavaScript Engine: JIT component.Vuln · CVE-2026-8388 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 12, 2026
High8.0Zen is a firefox-based browser.Vuln · CVE-2026-41431 · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.3%May 11, 2026
Critical9.9ai-scanner is an AI model safety scanner built on NVIDIA garak.Vuln · CVE-2026-41512 · mozilla · 0din scanner · CVE.org · FIRST EPSS · NIST NVDEPSS 0.8%May 8, 2026
Critical9.8Other issue in the WebRTC component.Vuln · CVE-2026-8094 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.6%May 7, 2026
High8.1Memory safety bugs present in Firefox 150.0.1.Vuln · CVE-2026-8093 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.4%May 7, 2026
High8.1Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1.Vuln · CVE-2026-8092 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.5%May 7, 2026
Critical9.8Incorrect boundary conditions in the Audio/Video: Playback component.Vuln · CVE-2026-8091 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.6%May 7, 2026
High7.3Use-after-free in the DOM: Networking component.Vuln · CVE-2026-8090 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.4%May 7, 2026
High7.3Memory safety bugs present in Thunderbird 150.0.0.Vuln · CVE-2026-7324 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.4%Apr 28, 2026