Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-16384 | 7.5 high | 0.00% | mozilla, firefox, thunderbird | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | Sat 24 Oct |
| CVE-2026-16385 | 7.5 high | 0.00% | mozilla, firefox, thunderbird | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | Sat 24 Oct |
| CVE-2026-16386 | 7.5 high | 0.00% | mozilla, firefox, thunderbird | Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | Sat 24 Oct |
| CVE-2026-16391 | 7.5 high | 0.00% | mozilla, firefox, thunderbird | Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | Sat 24 Oct |
| CVE-2026-16399 | 7.5 high | 0.00% | mozilla, firefox, thunderbird | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | Sat 24 Oct |
| CVE-2026-16400 | 7.5 high | 0.00% | mozilla, firefox, thunderbird | Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | Sat 24 Oct |
| CVE-2026-16405 | 7.5 high | 0.00% | mozilla, firefox | Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. | Sat 24 Oct |
| CVE-2026-14899 | 7.5 high | 0.00% | mozilla, thunderbird | The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13. | Sat 24 Oct |
| CVE-2025-13012 | 7.5 high | 0.00% | mozilla, firefox | Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5. | Fri 23 Oct |
| CVE-2025-13016 | 7.5 high | 0.00% | mozilla, firefox | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5. | Fri 23 Oct |
| CVE-2026-100805 | 7.5 high | 0.00% | mozilla, firefox, thunderbird | Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | 19 Oct |
| CVE-2025-13025 | 7.5 high | 0.00% | mozilla, firefox | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145. | 18 Oct |
| CVE-2026-8945 | 7.5 high | 0.00% | mozilla, firefox, firefox_focus | Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151. | 14 Oct |
| CVE-2026-8954 | 7.5 high | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. | 14 Oct |
| CVE-2026-8960 | 7.5 high | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and Thunderbird 151. | 14 Oct |
| CVE-2026-16404 | 7.4 high | 0.00% | mozilla, firefox_mobile | Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153. | Sat 24 Oct |
| CVE-2026-6751 | 7.3 high | 0.00% | mozilla, firefox, thunderbird | Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2026-6753 | 7.3 high | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2026-8090 | 7.3 high | 0.00% | mozilla, firefox, thunderbird | Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2. | Mon 26 Oct |
| CVE-2026-7322 | 7.3 high | 0.00% | mozilla, firefox, thunderbird | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1. | Mon 26 Oct |
| CVE-2026-7324 | 7.3 high | 0.00% | mozilla, firefox, thunderbird | Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1 and Thunderbird 150.0.1. | Mon 26 Oct |
| CVE-2026-8390 | 7.3 high | 0.00% | mozilla, firefox | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150.0.3. | Mon 26 Oct |
| CVE-2026-12318 | 7.3 high | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12324 | 7.3 high | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-7323 | 7.3 high | 0.00% | mozilla, firefox, thunderbird | Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1. | Mon 26 Oct |
| CVE-2026-6752 | 7.3 high | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Sun 25 Oct |
| CVE-2025-10528 | 7.3 high | 0.00% | mozilla, firefox, thunderbird | Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. | Fri 23 Oct |
| CVE-2026-8947 | 7.3 high | 0.00% | mozilla, firefox, thunderbird | Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. | 14 Oct |
| CVE-2025-10527 | 7.1 high | 0.00% | mozilla, firefox, thunderbird | Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. | Fri 23 Oct |
| CVE-2026-100792 | 7.1 high | 0.00% | mozilla, firefox, thunderbird | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17. | 19 Oct |
| CVE-2026-108013 | 6.8 medium | 0.00% | no CPE yet | BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with files downloaded by the application. The issue is resolved by using bundle version 2026/10/20 or later. The fixed bundle is available starting from BES Support v1520. | Mon 26 Oct |
| CVE-2026-6764 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions in the DOM: Device Interfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2026-12309 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12302 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12319 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12325 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-6755 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the DOM: postMessage component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | Mon 26 Oct |
| CVE-2026-6763 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2026-53899 | 6.5 medium | 0.00% | mozilla, firefox_mobile | Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a malicious site on a suffix domain to receive cookies belonging to the target site. This vulnerability was fixed in Firefox for iOS 152.0. | Mon 26 Oct |
| CVE-2026-57963 | 6.5 medium | 0.00% | mozilla, thunderbird | An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1. | Sun 25 Oct |
| CVE-2026-16397 | 6.5 medium | 0.00% | mozilla, firefox | Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153. | Sat 24 Oct |
| CVE-2026-16403 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | Sat 24 Oct |
| CVE-2023-0430 | 6.5 medium | 0.00% | mozilla, thunderbird | Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a valid signature. Thunderbird versions from 68 to 102.7.0 were affected by this bug. This vulnerability affects Thunderbird < 102.7.1. | Sat 24 Oct |
| CVE-2023-0616 | 6.5 medium | 0.00% | mozilla, thunderbird | If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8. | Sat 24 Oct |
| CVE-2023-28164 | 6.5 medium | 0.00% | mozilla, firefox, firefox_esr, thunderbird | Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9. | Sat 24 Oct |
| CVE-2025-10532 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. | Fri 23 Oct |
| CVE-2023-0547 | 6.5 medium | 0.00% | mozilla, thunderbird | OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions from 68 to 102.9.1 were affected by this bug. This vulnerability affects Thunderbird < 102.10. | Fri 23 Oct |
| CVE-2023-23601 | 6.5 medium | 0.00% | mozilla, firefox, firefox_esr, thunderbird | Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7. | Fri 23 Oct |
| CVE-2025-10529 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Same-origin policy bypass in the Layout component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. | Fri 23 Oct |
| CVE-2025-11711 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. | Fri 23 Oct |
Download these 360 as CSV · subscribe to this list.
EPSS scores: 2026-10-29. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.