BaselineWatch
60931 CVEs · 136 in KEV
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
CVEs known60,931 New, 24 h99 Changed, 24 h101 In KEV136 Public exploit1,650 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-118016 unscored 0.00% no CPE yet Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118015 unscored 0.00% no CPE yet Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118014 unscored 0.00% no CPE yet Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118013 unscored 0.00% no CPE yet Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118012 unscored 0.00% no CPE yet Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118011 unscored 0.00% no CPE yet Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118010 unscored 0.00% no CPE yet Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118009 unscored 0.00% no CPE yet Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118007 unscored 0.00% no CPE yet Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118006 unscored 0.00% no CPE yet Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118005 unscored 0.00% no CPE yet Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. Tue 27 Oct
CVE-2026-118027 unscored 0.00% no CPE yet Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44. Tue 27 Oct
CVE-2026-118018 unscored 0.00% no CPE yet Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159. Tue 27 Oct

613 of 613 · Previous

Download these 613 as CSV · subscribe to this list.

EPSS scores: 2026-10-31. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.