Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
5.4 MEDIUM
CVE-2026-109724 — Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-109723 — Integer overflow in the Layout: Text and Fonts component

Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.1 HIGH
CVE-2026-109722 — JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
0.0 NA
CVE-2026-109721 — Incorrect boundary conditions in the JavaScript Engine: JIT component

Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
0.0 NA
CVE-2026-109720 — JIT miscompilation in the JavaScript: WebAssembly component

JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
4.2 MEDIUM
CVE-2026-109719 — Race condition, use-after-free in the Graphics: CanvasWebGL component

Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Race Condition
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-109718 — Use-after-free in the XML component

Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-109717 — Use-after-free in the DOM: Bindings (WebIDL) component

Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.1 HIGH
CVE-2026-109716 — Incorrect boundary conditions in the JavaScript Engine component

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.1 HIGH
CVE-2026-109715 — Incorrect boundary conditions in the JavaScript Engine component

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
5.4 MEDIUM
CVE-2026-109714 — Incorrect boundary conditions in the Layout component

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
5.4 MEDIUM
CVE-2026-109713 — Use-after-free in the Crash Reporting component

Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.1 HIGH
CVE-2026-109712 — Sandbox escape due to uninitialized memory in the Graphics component

Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
5.4 MEDIUM
CVE-2026-109711 — Use-after-free in the Graphics: Canvas2D component

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-109710 — Use-after-free in the Graphics: Text component

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-109709 — Information disclosure, privilege escalation in the Security: Process Sandboxing component

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Information Disclosure
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
9.6 CRITICAL
CVE-2026-109708 — Sandbox escape due to incorrect boundary conditions in the Networking component

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Misconfiguration
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
9.6 CRITICAL
CVE-2026-109707 — Sandbox escape due to use-after-free in the Networking component

Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-109706 — Use-after-free in the Storage: IndexedDB component

Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.6 CRITICAL
CVE-2026-109705 — Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free…

Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158,…

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
Showing 20 of 15111 Results