Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Incorrect boundary conditions in the Networking: JAR component.EPSS 0.6%Feb 24, 2026
- Critical10.0Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component.EPSS 0.6%Feb 24, 2026
- Critical9.8Privilege escalation in the Messaging System component.EPSS 0.6%Feb 24, 2026
- Critical10.0Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software.EPSS 0.6%Feb 24, 2026
- Critical9.8Mitigation bypass in the DOM: HTML Parser component.EPSS 0.6%Feb 24, 2026
- Critical9.8Integer overflow in the Audio/Video component.EPSS 0.7%Feb 24, 2026
- Critical9.8Incorrect boundary conditions in the Web Audio component.EPSS 0.6%Feb 24, 2026
- Critical9.8Use-after-free in the Audio/Video: Playback component.EPSS 0.6%Feb 24, 2026
- Critical9.8Undefined behavior in the DOM: Core & HTML component.EPSS 0.6%Feb 24, 2026
- Critical9.8Use-after-free in the DOM: Bindings (WebIDL) component.EPSS 0.6%Feb 24, 2026
- High8.8Use-after-free in the Storage: IndexedDB component.EPSS 0.6%Feb 24, 2026
- Critical10.0Sandbox escape in the Storage: IndexedDB component.EPSS 0.6%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript: WebAssembly component.EPSS 0.6%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine: JIT component.EPSS 0.6%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine component.EPSS 0.6%Feb 24, 2026
- Critical9.8JIT miscompilation, use-after-free in the JavaScript Engine: JIT component.EPSS 0.6%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine component.EPSS 0.6%Feb 24, 2026
- Critical9.8Integer overflow in the JavaScript: Standard Library component.EPSS 0.7%Feb 24, 2026
- Critical10.0Sandbox escape in the Graphics: WebRender component.EPSS 0.6%Feb 24, 2026
- Critical10.0Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.EPSS 0.6%Feb 24, 2026
- Critical9.8Incorrect boundary conditions in the Graphics: ImageLib component.EPSS 0.6%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript: GC component.EPSS 0.6%Feb 24, 2026
- Critical9.8Incorrect boundary conditions in the WebRTC: Audio/Video component.EPSS 0.6%Feb 24, 2026
- High7.3Memory safety bugs present in Firefox 138 and Thunderbird 138.EPSS 0.3%May 27, 2025
- Medium6.5Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks.EPSS 0.3%May 27, 2025