Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2025-10290 | 6.5 medium | 0.00% | mozilla, firefox_focus | Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press. This vulnerability was fixed in Focus for iOS 143.0. | Fri 23 Oct |
| CVE-2026-74951 | 6.5 medium | 0.00% | mozilla, firefox_mobile | Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154. | 22 Oct |
| CVE-2026-74980 | 6.5 medium | 0.00% | mozilla, firefox_mobile | Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154. | 22 Oct |
| CVE-2026-100793 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | 19 Oct |
| CVE-2026-100795 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | 19 Oct |
| CVE-2025-10530 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 143 and Thunderbird 143. | 18 Oct |
| CVE-2025-11716 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144. | 18 Oct |
| CVE-2026-8951 | 6.5 medium | 0.00% | mozilla, firefox | Spoofing issue in the Toolbar component in Firefox for Android. This vulnerability was fixed in Firefox 151. | 14 Oct |
| CVE-2026-100826 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. | 13 Oct |
| CVE-2025-11718 | 6.5 medium | 0.00% | mozilla, firefox | When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144. | 8 Oct |
| CVE-2026-6757 | 6.3 medium | 0.00% | mozilla, firefox, thunderbird | Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2026-6762 | 6.3 medium | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2026-13356 | 6.3 medium | 0.00% | mozilla, firefox | A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3. | Sun 25 Oct |
| CVE-2025-10536 | 6.2 medium | 0.00% | mozilla, firefox, thunderbird | Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. | Fri 23 Oct |
| CVE-2025-11712 | 6.1 medium | 0.00% | mozilla, firefox, thunderbird | A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. | Fri 23 Oct |
| CVE-2025-13013 | 6.1 medium | 0.00% | mozilla, firefox | Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5. | Fri 23 Oct |
| CVE-2025-6430 | 6.1 medium | 0.00% | mozilla, firefox | When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12. | Fri 23 Oct |
| CVE-2026-103500 | 6.1 medium | 0.00% | mozilla, thunderbird | An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4. | 16 Oct |
| CVE-2023-29532 | 5.5 medium | 0.00% | mozilla, firefox, firefox_esr, thunderbird | A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10. | Fri 23 Oct |
| CVE-2025-66453 | 5.5 medium | 0.00% | mozilla, rhino | Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed() function, it might lead to high CPU consumption and a potential Denial of Service. Small numbers go through this call stack: NativeNumber.numTo > DToA.JS_dtostr > DToA.JS_dtoa > DToA.pow5mult where pow5mult attempts to raise 5 to a ridiculous power. This vulnerability is fixed in 1.8.1, 1.7.15.1, and 1.7.14.1. | 18 Oct |
| CVE-2026-6774 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | Mon 26 Oct |
| CVE-2026-12298 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12321 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12322 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12323 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12330 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12299 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-74975 | 5.4 medium | 0.00% | mozilla, firefox_mobile | Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154. | 22 Oct |
| CVE-2025-10531 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the Web Compatibility: Tooling component. This vulnerability was fixed in Firefox 143 and Thunderbird 143. | 18 Oct |
| CVE-2026-100822 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. | 13 Oct |
| CVE-2026-6767 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Other issue in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2026-6775 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | Mon 26 Oct |
| CVE-2026-6778 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | Mon 26 Oct |
| CVE-2026-6783 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | Mon 26 Oct |
| CVE-2026-12300 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12301 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12306 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12307 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12308 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-6779 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | Mon 26 Oct |
| CVE-2026-6777 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Other issue in the Networking: DNS component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | Sun 25 Oct |
| CVE-2026-8391 | 5.3 medium | 0.00% | mozilla, firefox | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11. | Sun 25 Oct |
| CVE-2026-12329 | 5.3 medium | 0.00% | mozilla, firefox, thunderbird | Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12. | Sun 25 Oct |
| CVE-2026-57962 | 5.3 medium | 0.00% | mozilla, thunderbird | A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thunderbird LDAP client until it crashes due to memory exhaustion. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1. | Sun 25 Oct |
| CVE-2026-14906 | 5.3 medium | 0.00% | mozilla, firefox_mobile | Pages with malicious titles could potentially allow saved PDF content to overwrite PDF files or bundled content within the Firefox for iOS application sandbox. This vulnerability was fixed in Firefox for iOS 152.4. | Sat 24 Oct |
| CVE-2026-6654 | 5.1 medium | 0.00% | mozilla, thin-vec | Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero. | Mon 26 Oct |
| CVE-2026-12311 | 4.7 medium | 0.00% | mozilla, firefox, thunderbird | Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12313 | 4.7 medium | 0.00% | mozilla, firefox, thunderbird | Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-100821 | 4.7 medium | 0.00% | mozilla, firefox, thunderbird | Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. | 13 Oct |
| CVE-2026-12303 | 4.3 medium | 0.00% | mozilla, firefox, thunderbird | Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
Download these 360 as CSV · subscribe to this list.
EPSS scores: 2026-10-29. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.