Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-12302 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12319 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12325 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-6755 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the DOM: postMessage component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | Mon 26 Oct |
| CVE-2026-6763 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2026-57963 | 6.5 medium | 0.00% | mozilla, thunderbird | An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1. | Sun 25 Oct |
| CVE-2026-16403 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. | Sat 24 Oct |
| CVE-2023-0430 | 6.5 medium | 0.00% | mozilla, thunderbird | Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a valid signature. Thunderbird versions from 68 to 102.7.0 were affected by this bug. This vulnerability affects Thunderbird < 102.7.1. | Sat 24 Oct |
| CVE-2023-0616 | 6.5 medium | 0.00% | mozilla, thunderbird | If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8. | Sat 24 Oct |
| CVE-2023-28164 | 6.5 medium | 0.00% | mozilla, firefox, firefox_esr, thunderbird | Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9. | Sat 24 Oct |
| CVE-2025-10532 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. | Fri 23 Oct |
| CVE-2023-0547 | 6.5 medium | 0.00% | mozilla, thunderbird | OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions from 68 to 102.9.1 were affected by this bug. This vulnerability affects Thunderbird < 102.10. | Fri 23 Oct |
| CVE-2023-23601 | 6.5 medium | 0.00% | mozilla, firefox, firefox_esr, thunderbird | Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7. | Fri 23 Oct |
| CVE-2025-10529 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Same-origin policy bypass in the Layout component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. | Fri 23 Oct |
| CVE-2025-11711 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. | Fri 23 Oct |
| CVE-2026-113401 | 6.5 medium | 0.00% | no CPE yet | Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. | 20 Oct |
| CVE-2026-100793 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | 19 Oct |
| CVE-2026-100795 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. | 19 Oct |
| CVE-2025-10530 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 143 and Thunderbird 143. | 18 Oct |
| CVE-2025-11716 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144. | 18 Oct |
| CVE-2026-109781 | 6.5 medium | 0.00% | no CPE yet | Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109775 | 6.5 medium | 0.00% | no CPE yet | Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109773 | 6.5 medium | 0.00% | no CPE yet | Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 13 Oct |
| CVE-2026-109768 | 6.5 medium | 0.00% | no CPE yet | Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 13 Oct |
| CVE-2026-100826 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. | 13 Oct |
| CVE-2026-6757 | 6.3 medium | 0.00% | mozilla, firefox, thunderbird | Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2026-6762 | 6.3 medium | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2025-10536 | 6.2 medium | 0.00% | mozilla, firefox, thunderbird | Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. | Fri 23 Oct |
| CVE-2025-11712 | 6.1 medium | 0.00% | mozilla, firefox, thunderbird | A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. | Fri 23 Oct |
| CVE-2025-13013 | 6.1 medium | 0.00% | mozilla, firefox | Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5. | Fri 23 Oct |
| CVE-2025-6430 | 6.1 medium | 0.00% | mozilla, firefox | When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12. | Fri 23 Oct |
| CVE-2026-109770 | 6.1 medium | 0.00% | no CPE yet | Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 19 Oct |
| CVE-2026-103500 | 6.1 medium | 0.00% | mozilla, thunderbird | An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4. | 16 Oct |
| CVE-2026-113866 | 5.9 medium | 0.00% | no CPE yet | When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.5.1. | 22 Oct |
| CVE-2023-29532 | 5.5 medium | 0.00% | mozilla, firefox, firefox_esr, thunderbird | A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10. | Fri 23 Oct |
| CVE-2026-113869 | 5.4 medium | 0.00% | no CPE yet | When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free and a potentially exploitable crash. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.6. | Tue 27 Oct |
| CVE-2026-6774 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | Mon 26 Oct |
| CVE-2026-12298 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12321 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12322 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12323 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12330 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12299 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-113470 | 5.4 medium | 0.00% | no CPE yet | Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2. | 21 Oct |
| CVE-2026-113400 | 5.4 medium | 0.00% | no CPE yet | Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. | 20 Oct |
| CVE-2026-109764 | 5.4 medium | 0.00% | no CPE yet | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 19 Oct |
| CVE-2026-109731 | 5.4 medium | 0.00% | no CPE yet | Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 19 Oct |
| CVE-2025-10531 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the Web Compatibility: Tooling component. This vulnerability was fixed in Firefox 143 and Thunderbird 143. | 18 Oct |
| CVE-2026-109723 | 5.4 medium | 0.00% | no CPE yet | Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 15 Oct |
| CVE-2026-109714 | 5.4 medium | 0.00% | no CPE yet | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 15 Oct |
Download these 581 as CSV · subscribe to this list.
EPSS scores: 2026-10-29. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.