BaselineWatch
60718 CVEs · 136 in KEV
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
CVEs known60,718 New, 24 h1,922 Changed, 24 h2,127 In KEV136 Public exploit1,619 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-117870 unscored 0.00% no CPE yet Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117869 unscored 0.00% no CPE yet Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117868 unscored 0.00% no CPE yet Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117867 unscored 0.00% no CPE yet Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117866 unscored 0.00% no CPE yet Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117865 unscored 0.00% no CPE yet Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117864 unscored 0.00% no CPE yet Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117863 unscored 0.00% no CPE yet Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117862 unscored 0.00% no CPE yet Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117861 unscored 0.00% no CPE yet Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-117860 unscored 0.00% no CPE yet Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. Tue 27 Oct
CVE-2026-118026 unscored 0.00% no CPE yet Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118025 unscored 0.00% no CPE yet Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118024 unscored 0.00% no CPE yet Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118023 unscored 0.00% no CPE yet Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118022 unscored 0.00% no CPE yet Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118021 unscored 0.00% no CPE yet Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118020 unscored 0.00% no CPE yet Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118019 unscored 0.00% no CPE yet Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118017 unscored 0.00% no CPE yet Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118016 unscored 0.00% no CPE yet Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118015 unscored 0.00% no CPE yet Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118014 unscored 0.00% no CPE yet Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118013 unscored 0.00% no CPE yet Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118012 unscored 0.00% no CPE yet Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118011 unscored 0.00% no CPE yet Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118010 unscored 0.00% no CPE yet Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118009 unscored 0.00% no CPE yet Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118007 unscored 0.00% no CPE yet Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118006 unscored 0.00% no CPE yet Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118005 unscored 0.00% no CPE yet Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct

581 of 581 · Previous

Download these 581 as CSV · subscribe to this list.

EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.