Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-109781 | 6.5 medium | 0.00% | no CPE yet | Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109775 | 6.5 medium | 0.00% | no CPE yet | Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109773 | 6.5 medium | 0.00% | no CPE yet | Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 13 Oct |
| CVE-2026-109768 | 6.5 medium | 0.00% | no CPE yet | Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 13 Oct |
| CVE-2026-100826 | 6.5 medium | 0.00% | mozilla, firefox, thunderbird | Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. | 13 Oct |
| CVE-2025-11718 | 6.5 medium | 0.00% | mozilla, firefox | When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144. | 8 Oct |
| CVE-2026-6757 | 6.3 medium | 0.00% | mozilla, firefox, thunderbird | Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2026-6762 | 6.3 medium | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. | Mon 26 Oct |
| CVE-2026-13356 | 6.3 medium | 0.00% | mozilla, firefox | A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 152.3. | Sun 25 Oct |
| CVE-2026-45150 | 6.3 medium | 0.00% | no CPE yet | Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persistent, clearly visible security notification when a webpage entered fullscreen mode, allowing an attacker-controlled page to hide the real browser UI and origin information, imitate a trusted website UI, and combine with long-domain URL eliding to spoof a trusted origin for phishing and credential theft. This issue is fixed in version 1.19.13b. | Sat 24 Oct |
| CVE-2025-10536 | 6.2 medium | 0.00% | mozilla, firefox, thunderbird | Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3. | 23 Oct |
| CVE-2025-11712 | 6.1 medium | 0.00% | mozilla, firefox, thunderbird | A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4. | 23 Oct |
| CVE-2025-13013 | 6.1 medium | 0.00% | mozilla, firefox | Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5. | 23 Oct |
| CVE-2025-6430 | 6.1 medium | 0.00% | mozilla, firefox | When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12. | 23 Oct |
| CVE-2026-109770 | 6.1 medium | 0.00% | no CPE yet | Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 19 Oct |
| CVE-2023-29532 | 5.5 medium | 0.00% | mozilla, firefox, firefox_esr, thunderbird | A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced after the signature check, before the use, because the write-lock requested by the service does not work on a SMB server. *Note: This attack requires local system access and only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10. | 23 Oct |
| CVE-2026-103417 | 5.5 medium | 0.00% | no CPE yet | Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox for iOS 157.1. | 13 Oct |
| CVE-2026-116631 | 5.4 medium | 0.00% | no CPE yet | A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1. | Tue 27 Oct |
| CVE-2026-116632 | 5.4 medium | 0.00% | no CPE yet | A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1. | Tue 27 Oct |
| CVE-2026-6774 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. | Mon 26 Oct |
| CVE-2026-12298 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12321 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12322 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12323 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Thunderbird 152. | Mon 26 Oct |
| CVE-2026-12330 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 140.12, Firefox ESR 115.37, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-12299 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. | Mon 26 Oct |
| CVE-2026-74975 | 5.4 medium | 0.00% | mozilla, firefox_mobile | Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154. | 22 Oct |
| CVE-2026-113470 | 5.4 medium | 0.00% | no CPE yet | Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2. | 21 Oct |
| CVE-2026-113400 | 5.4 medium | 0.00% | no CPE yet | Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. | 20 Oct |
| CVE-2026-109764 | 5.4 medium | 0.00% | no CPE yet | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 19 Oct |
| CVE-2026-109731 | 5.4 medium | 0.00% | no CPE yet | Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 19 Oct |
| CVE-2025-10531 | 5.4 medium | 0.00% | mozilla, firefox, thunderbird | Mitigation bypass in the Web Compatibility: Tooling component. This vulnerability was fixed in Firefox 143 and Thunderbird 143. | 18 Oct |
| CVE-2026-109723 | 5.4 medium | 0.00% | no CPE yet | Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 15 Oct |
| CVE-2026-109714 | 5.4 medium | 0.00% | no CPE yet | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 15 Oct |
| CVE-2026-109761 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 13 Oct |
| CVE-2026-109752 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109749 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 13 Oct |
| CVE-2026-109748 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 13 Oct |
| CVE-2026-109741 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109738 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109735 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | 13 Oct |
| CVE-2026-109732 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109729 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109728 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109727 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109726 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109725 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109724 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109718 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
| CVE-2026-109717 | 5.4 medium | 0.00% | no CPE yet | Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | 13 Oct |
Download these 613 as CSV · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.