BaselineWatch
60930 CVEs · 136 in KEV
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
CVEs known60,930 New, 24 h100 Changed, 24 h102 In KEV136 Public exploit1,650 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-117900 unscored 0.00% no CPE yet Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117899 unscored 0.00% no CPE yet Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117898 unscored 0.00% no CPE yet Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117897 unscored 0.00% no CPE yet Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117896 unscored 0.00% no CPE yet Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117895 unscored 0.00% no CPE yet Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117894 unscored 0.00% no CPE yet Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117893 unscored 0.00% no CPE yet Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117892 unscored 0.00% no CPE yet Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117891 unscored 0.00% no CPE yet Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117890 unscored 0.00% no CPE yet JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117889 unscored 0.00% no CPE yet Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117888 unscored 0.00% no CPE yet Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117887 unscored 0.00% no CPE yet Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117886 unscored 0.00% no CPE yet Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117885 unscored 0.00% no CPE yet Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117884 unscored 0.00% no CPE yet Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117883 unscored 0.00% no CPE yet Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117882 unscored 0.00% no CPE yet Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117881 unscored 0.00% no CPE yet Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117880 unscored 0.00% no CPE yet Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117879 unscored 0.00% no CPE yet Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117878 unscored 0.00% no CPE yet Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117877 unscored 0.00% no CPE yet Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117876 unscored 0.00% no CPE yet Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117875 unscored 0.00% no CPE yet Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117874 unscored 0.00% no CPE yet Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117873 unscored 0.00% no CPE yet Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117872 unscored 0.00% no CPE yet Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117871 unscored 0.00% no CPE yet Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117870 unscored 0.00% no CPE yet Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117869 unscored 0.00% no CPE yet Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117868 unscored 0.00% no CPE yet Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117867 unscored 0.00% no CPE yet Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117866 unscored 0.00% no CPE yet Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117865 unscored 0.00% no CPE yet Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117864 unscored 0.00% no CPE yet Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117863 unscored 0.00% no CPE yet Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117862 unscored 0.00% no CPE yet Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117861 unscored 0.00% no CPE yet Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117860 unscored 0.00% no CPE yet Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-118026 unscored 0.00% no CPE yet Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118025 unscored 0.00% no CPE yet Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118024 unscored 0.00% no CPE yet Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118023 unscored 0.00% no CPE yet Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118022 unscored 0.00% no CPE yet Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118021 unscored 0.00% no CPE yet Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118020 unscored 0.00% no CPE yet Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118019 unscored 0.00% no CPE yet Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118017 unscored 0.00% no CPE yet Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct

600 of 613 · Next · Previous

Download these 613 as CSV · subscribe to this list.

EPSS scores: 2026-10-31. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.