Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.1 HIGH
CVE-2026-109760 — Mitigation bypass in the Networking: HTTP component

Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Misconfiguration
Oct 13, 2026 Oct 19, 2026
Oct 13, 2026
Oct 19, 2026
8.1 HIGH
CVE-2026-109759 — Site isolation issue in the Networking component

Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Misconfiguration
Oct 13, 2026 Oct 19, 2026
Oct 13, 2026
Oct 19, 2026
8.3 HIGH
CVE-2026-109757 — Sandbox escape due to race condition in the Networking component

Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Race Condition
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-109756 — Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
9.6 CRITICAL
CVE-2026-109755 — Sandbox escape in the DOM: Content Processes component

Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

firefox thunderbird | Remote | Misconfiguration
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.1 HIGH
CVE-2026-109754 — Incorrect boundary conditions in the DOM: Editor component

Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 19, 2026
Oct 13, 2026
Oct 19, 2026
8.1 HIGH
CVE-2026-109753 — Incorrect boundary conditions in the Layout component

Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
5.4 MEDIUM
CVE-2026-109752 — Use-after-free in the DOM: Workers component

Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
4.3 MEDIUM
CVE-2026-109751 — Information disclosure in the Networking component

Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Information Disclosure
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.6 CRITICAL
CVE-2026-109750 — Site isolation issue in the DOM: Web Authentication component

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

firefox thunderbird | Remote | Authentication
Oct 13, 2026 Oct 19, 2026
Oct 13, 2026
Oct 19, 2026
5.4 MEDIUM
CVE-2026-109749 — Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-109748 — Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.3 HIGH
CVE-2026-109747 — Other issue in the Address Bar component

Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

firefox thunderbird | Remote
Oct 13, 2026 Oct 19, 2026
Oct 13, 2026
Oct 19, 2026
7.3 HIGH
CVE-2026-109746 — Mitigation bypass in the DOM: Security component

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.

firefox thunderbird | Remote | Misconfiguration
Oct 13, 2026 Oct 19, 2026
Oct 13, 2026
Oct 19, 2026
9.6 CRITICAL
CVE-2026-109745 — Sandbox escape due to uninitialized memory in the DOM: Web Serial component

Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 19, 2026
Oct 13, 2026
Oct 19, 2026
8.1 HIGH
CVE-2026-109744 — Other issue in the DOM: File component

Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote
Oct 13, 2026 Oct 19, 2026
Oct 13, 2026
Oct 19, 2026
8.8 HIGH
CVE-2026-109743 — Privilege escalation in the Panning and Zooming component

Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
4.3 MEDIUM
CVE-2026-109742 — Information disclosure in the PDF Viewer component

Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Information Disclosure
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
5.4 MEDIUM
CVE-2026-109741 — Use-after-free in the Storage: Bucket File System component

Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Memory Corruption
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.6 CRITICAL
CVE-2026-109740 — Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

firefox thunderbird | Remote | Misconfiguration
Oct 13, 2026 Oct 19, 2026
Oct 13, 2026
Oct 19, 2026
Showing 20 of 18767 Results