CVE-20XX-?
agent?

The internet is broken right now.

54 critical CVEs without a fix in the last 48 hours. Somewhere a staging server is public. It always is. 32 more already have a fix that someone still has to apply.

1,243 CVEs · updated 2026-11-14 12:03 UTC

Reset all
  1. CVE-2026-117923

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  2. CVE-2026-117906

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  3. CVE-2026-117907

    Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  4. CVE-2026-117908

    Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  5. CVE-2026-117911

    Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  6. CVE-2026-117914

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  7. CVE-2026-117896

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  8. CVE-2026-117905

    Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  9. CVE-2026-117895

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  10. CVE-2026-117878

    Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  11. CVE-2026-117880

    Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  12. CVE-2026-117882

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  13. CVE-2026-117876

    Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  14. CVE-2026-117874

    Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    6.3 MEDIUM 0.3% exploit odds Fix listed
  15. CVE-2026-63010

    Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.172, 25.0.108, and 26.0.33, a low-privileged user can create manual reminders containing arbitrary HTML/JavaScript and assign them to any other user (including administrators). When the victim's browser polls for pending notifications, the payload renders unsanitized as innerHTML in the ExtJS notification panel, achieving Stored Cross-Site Scripting (XSS) leading to full Account Takeover (ATO) of the victim's session. This issue has been patched in versions 6.8.172, 25.0.108, and 26.0.33.

    XSS Browser & mail

    8.7 HIGH 0.3% exploit odds Fix listed
  16. CVE-2026-121211

    Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.3 HIGH 0.3% exploit odds Fix listed
  17. CVE-2026-118345

    Buffer overflow in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.3% exploit odds Fix listed
  18. CVE-2026-118661

    Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 20.14.6, Happy DOM's CookieContainer in src/cookie/CookieContainer.ts does not correctly validate or match Domain cookie attributes. It can accept a Domain unrelated to the origin setting the cookie, including a public suffix, and separately treats an unrelated suffix-sharing hostname as a match because cookieMatchesURL does not enforce a DNS-label boundary. In server-side rendering and prerendering applications that contact attacker-controlled origins and then make requests to a victim origin, these behaviors can plant and deliver a forged cookie, enabling cookie injection or session fixation. This issue is fixed in version 20.14.6.

    Other Browser & mail

    6.5 MEDIUM 0.3% exploit odds Fix listed
  19. CVE-2026-113218

    Race condition in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

    XSS Browser & mail Google Chrome

    8.8 HIGH 0.3% exploit odds Fix listed
  20. CVE-2026-126203

    Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.21.0 until 2.25.3, Loofah's HTML5 APIs Loofah.html5_fragment, Loofah.html5_document, and the scrub_html5_* methods can emit sanitized output that a browser reparses as different markup when used with Nokogiri before 1.19.5, because those Nokogiri versions do not escape angle brackets in attribute values. MathML can place markup inside an allowed attribute so the reparsed output becomes live HTML. The :strip scrubber is affected in every browser, while :prune and :escape are affected in WebKit browsers. Loofah's HTML4 APIs, Loofah::Helpers.sanitize, :whitewash, rails-html-sanitizer's default configuration, and JRuby are not affected. This issue is fixed in version 2.25.3.

    XSS Browser & mail

    6.1 MEDIUM 0.3% exploit odds Fix listed
  21. CVE-2026-119263

    Use after free in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    9.6 CRITICAL 0.3% exploit odds Fix listed
  22. CVE-2026-113129

    Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)

    Auth & access Browser & mail Google Chrome

    6.5 MEDIUM 0.3% exploit odds Fix listed
  23. CVE-2026-121227

    Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    7.4 HIGH 0.3% exploit odds Fix listed
  24. CVE-2026-121213

    Uninitialized resource in Images in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

    Other Browser & mail Google Chrome

    6.5 MEDIUM 0.3% exploit odds Fix listed
  25. CVE-2026-121207

    Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    7.4 HIGH 0.3% exploit odds Fix listed
  26. CVE-2026-121173

    Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    7.4 HIGH 0.3% exploit odds Fix listed
  27. CVE-2026-121143

    Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    7.4 HIGH 0.3% exploit odds Fix listed
  28. CVE-2026-121095

    Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    7.4 HIGH 0.3% exploit odds Fix listed
  29. CVE-2026-121063

    Incorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

    Auth & access Browser & mail Google Chrome

    8.1 HIGH 0.3% exploit odds Fix listed
  30. CVE-2026-121130

    Observable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

    Other Browser & mail Google Chrome

    5.3 MEDIUM 0.3% exploit odds Fix listed
  31. CVE-2026-121125

    Information leak in ServiceWorker in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

    Disclosure Browser & mail Google Chrome

    5.3 MEDIUM 0.3% exploit odds Fix listed
  32. CVE-2026-113335

    Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)

    Other Browser & mail Google Chrome

    8.8 HIGH 0.3% exploit odds Fix listed
  33. CVE-2026-126869

    Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.3% exploit odds Fix listed
  34. CVE-2026-126863

    Use after free in HTML in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.3% exploit odds Fix listed
  35. CVE-2026-126865

    Use after free in DOM in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.3% exploit odds Fix listed
  36. CVE-2026-126851

    Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail

    8.8 HIGH 0.3% exploit odds No fix listed
  37. CVE-2026-113141

    Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)

    Other Browser & mail Google Chrome

    8.8 HIGH 0.3% exploit odds Fix listed
  38. CVE-2026-124944

    Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Disclosure Browser & mail

    4.3 MEDIUM 0.3% exploit odds Fix listed
  39. CVE-2026-121080

    Use after free in Codecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    4.3 MEDIUM 0.3% exploit odds Fix listed
  40. CVE-2026-113060

    UI misrepresentation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker leveraging social engineering to spoof UI elements via a malicious peripheral. (Chromium security severity: Medium)

    Other Browser & mail Google Chrome

    8.8 HIGH 0.3% exploit odds Fix listed
  41. CVE-2026-118340

    Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    9.6 CRITICAL 0.3% exploit odds Fix listed
  42. CVE-2026-118328

    Out of bounds read in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.3% exploit odds Fix listed
  43. CVE-2026-117933

    Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Denial of service Browser & mail

    5.4 MEDIUM 0.3% exploit odds Fix listed
  44. CVE-2026-117888

    Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Other Browser & mail

    5.4 MEDIUM 0.3% exploit odds Fix listed
  45. CVE-2026-117894

    Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

    Memory safety Browser & mail

    5.4 MEDIUM 0.3% exploit odds Fix listed
  46. CVE-2026-113038

    Race condition in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

    Other Browser & mail Google Chrome

    6.5 MEDIUM 0.3% exploit odds Fix listed
  47. CVE-2026-86872

    A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.

    Other Browser & mail Apple Safari

    5.4 MEDIUM 0.3% exploit odds Fix listed
  48. CVE-2025-6623

    The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the injection of malicious scripts. Successful exploitation allows a remote attacker to execute arbitrary JavaScript in the context of a victim's browser, leading to actions such as redirecting the user to a malicious website or modifying the web page's user interface. Session hijacking is not possible as sensitive session cookies are protected by the httpOnly flag.

    XSS Browser & mail

    4.3 MEDIUM 0.3% exploit odds Fix listed
  49. CVE-2026-119266

    Incorrect reference resolution in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Code execution Browser & mail Google Chrome

    8.8 HIGH 0.3% exploit odds Fix listed
  50. CVE-2026-118351

    Use after free in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail Google Chrome

    8.8 HIGH 0.3% exploit odds Fix listed