CVE-20XX-?
agent?

Just published.

The newest CVEs, straight from CVE.org and NVD.

404,042 CVEs · updated 2026-11-10 23:13 UTC

  1. CVE-2026-124898

    Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  2. CVE-2026-124899

    Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  3. CVE-2026-124900

    Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Memory safety Browser & mail

    9.6 CRITICAL Fix listed
  4. CVE-2026-124901

    Other issue in the Networking: JAR component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Other Browser & mail

    unscored Fix listed
  5. CVE-2026-124902

    Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Other Browser & mail

    unscored Fix listed
  6. CVE-2026-124903

    Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    9.6 CRITICAL Fix listed
  7. CVE-2026-124887

    Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  8. CVE-2026-124888

    Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  9. CVE-2026-124889

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  10. CVE-2026-124890

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  11. CVE-2026-124891

    Incorrect boundary conditions in the DOM: Selection component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  12. CVE-2026-124892

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  13. CVE-2026-124893

    Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  14. CVE-2026-124894

    Use-after-free in the Networking: Cookies component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  15. CVE-2026-124881

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  16. CVE-2026-124882

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  17. CVE-2026-124883

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  18. CVE-2026-124884

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  19. CVE-2026-124885

    Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  20. CVE-2026-124886

    Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    unscored Fix listed
  21. CVE-2026-124874

    Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Other Browser & mail

    unscored Fix listed
  22. CVE-2026-124875

    Incorrect boundary conditions in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  23. CVE-2026-124876

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  24. CVE-2026-124877

    Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  25. CVE-2026-124878

    Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  26. CVE-2026-124879

    Invalid pointer in the Networking: Cache component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    unscored Fix listed
  27. CVE-2026-124880

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  28. CVE-2026-124866

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  29. CVE-2026-124867

    Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  30. CVE-2026-124868

    Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  31. CVE-2026-124869

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  32. CVE-2026-124870

    Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  33. CVE-2026-124871

    Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  34. CVE-2026-124872

    Use-after-free in the Cycle Collector component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  35. CVE-2026-124873

    Invalid pointer in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Other Browser & mail

    unscored Fix listed
  36. CVE-2026-124858

    Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  37. CVE-2026-124859

    Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    9.6 CRITICAL Fix listed
  38. CVE-2026-124860

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  39. CVE-2026-124861

    Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    9.6 CRITICAL Fix listed
  40. CVE-2026-124862

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  41. CVE-2026-124863

    Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  42. CVE-2026-124864

    Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    9.6 CRITICAL Fix listed
  43. CVE-2026-124865

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  44. CVE-2026-124853

    Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    9.6 CRITICAL Fix listed
  45. CVE-2026-124854

    Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Auth & access Browser & mail

    unscored Fix listed
  46. CVE-2026-124855

    Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    XSS Browser & mail

    unscored Fix listed
  47. CVE-2026-124856

    Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  48. CVE-2026-124857

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  49. CVE-2026-124852

    Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Memory safety Browser & mail

    8.8 HIGH Fix listed
  50. CVE-2026-120399

    A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections.

    Denial of service Server

    7.5 HIGH No fix listed

The newest published CVE records from CVE.org and NVD, refreshed every few minutes, with severity, exploit odds and fix status.