Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

UnknownIncorrect boundary conditions in the Layout componentVuln · CVE-2026-109753 · Mozilla · Firefox · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · FirefoxEPSS 0.3%Oct 13, 2026
UnknownJIT miscompilation in the JavaScript Engine: JIT componentVuln · CVE-2026-109733 · Mozilla · Firefox · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · FirefoxEPSS 0.3%Oct 13, 2026
UnknownInteger overflow in the Graphics componentVuln · CVE-2026-109730 · Mozilla · Firefox · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · FirefoxEPSS 0.4%Oct 13, 2026
UnknownAsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukVuln · CVE-2026-107280 · CVE.org · FIRST EPSS · GitHub Advisory Database · MavenEPSS 0.3%Oct 8, 2026
Medium5.4Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces.Vuln · CVE-2026-9078 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 25, 2026
Medium6.5Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the re…Vuln · CVE-2026-8706 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High8.8Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150.Vuln · CVE-2026-8975 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High8.8Memory safety bugs present in Firefox ESR 140.10 and Firefox 150.Vuln · CVE-2026-8974 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High8.8Memory safety bugs present in Firefox 150.Vuln · CVE-2026-8973 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High8.8Privilege escalation in the WebRTC: Audio/Video component.Vuln · CVE-2026-8972 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
Medium6.5Same-origin policy bypass in the Networking: JAR component.Vuln · CVE-2026-8971 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High8.8Privilege escalation in the Security component.Vuln · CVE-2026-8970 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High8.1Mitigation bypass in the DOM: Security component.Vuln · CVE-2026-8969 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High7.5Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component.Vuln · CVE-2026-8968 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High7.5Information disclosure in the Graphics: WebGPU component.Vuln · CVE-2026-8967 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High7.5Information disclosure in the IP Protection component.Vuln · CVE-2026-8966 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High7.5Information disclosure in the DOM: Security component.Vuln · CVE-2026-8965 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High7.5Spoofing issue in the Popup Blocker component.Vuln · CVE-2026-8964 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High7.5Spoofing issue in the Web Speech component.Vuln · CVE-2026-8963 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High8.1Mitigation bypass in the DOM: Security component.Vuln · CVE-2026-8962 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
Medium6.5Spoofing issue in the Form Autofill component.Vuln · CVE-2026-8961 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 19, 2026
High7.5Spoofing issue in WebExtensions.Vuln · CVE-2026-8960 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.4%May 19, 2026
Critical9.6Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.Vuln · CVE-2026-8959 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · Firefox, WindowsEPSS 0.4%May 19, 2026
High8.6Information disclosure, sandbox escape in the Security: Process Sandboxing component.Vuln · CVE-2026-8958 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.4%May 19, 2026
High8.8Privilege escalation in the Enterprise Policies component.Vuln · CVE-2026-8957 · mozilla · firefox · CVE.org · FIRST EPSS · NIST NVD · FirefoxEPSS 0.4%May 19, 2026