CVE-20XX-?
agent?

Just published.

The newest CVEs, straight from CVE.org and NVD.

404,713 CVEs · updated 2026-11-12 02:29 UTC

  1. CVE-2026-124929

    Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Disclosure Browser & mail

    4.3 MEDIUM 0.3% exploit odds Fix listed
  2. CVE-2026-124912

    Spoofing issue in the DOM: Security component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    XSS Browser & mail

    unscored 0.2% exploit odds Fix listed
  3. CVE-2026-124913

    Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Other Browser & mail

    unscored 0.2% exploit odds Fix listed
  4. CVE-2026-124914

    Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Other Browser & mail

    unscored 0.2% exploit odds Fix listed
  5. CVE-2026-124915

    Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.3% exploit odds Fix listed
  6. CVE-2026-124917

    Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    9.6 CRITICAL 0.3% exploit odds Fix listed
  7. CVE-2026-124918

    Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.3% exploit odds Fix listed
  8. CVE-2026-124919

    Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.3% exploit odds Fix listed
  9. CVE-2026-124920

    Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Other Browser & mail

    unscored 0.2% exploit odds Fix listed
  10. CVE-2026-124921

    Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Other Browser & mail

    unscored 0.2% exploit odds Fix listed
  11. CVE-2026-124904

    Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Memory safety Browser & mail

    8.8 HIGH 0.3% exploit odds Fix listed
  12. CVE-2026-124905

    Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    XSS Browser & mail

    unscored 0.2% exploit odds Fix listed
  13. CVE-2026-124906

    Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.3% exploit odds Fix listed
  14. CVE-2026-124907

    Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.3% exploit odds Fix listed
  15. CVE-2026-124908

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Memory safety Browser & mail

    8.8 HIGH 0.3% exploit odds Fix listed
  16. CVE-2026-124909

    Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Disclosure Browser & mail

    4.3 MEDIUM 0.3% exploit odds Fix listed
  17. CVE-2026-124910

    Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Other Browser & mail

    unscored 0.2% exploit odds Fix listed
  18. CVE-2026-124911

    Clickjacking issue in the Autofill component in Firefox for Android. This vulnerability was fixed in Firefox 160.

    Other Browser & mail

    unscored 0.1% exploit odds Fix listed
  19. CVE-2026-124895

    Use-after-free in the Storage: localStorage & sessionStorage component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  20. CVE-2026-124896

    Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    unscored 0.2% exploit odds Fix listed
  21. CVE-2026-124897

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  22. CVE-2026-124898

    Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  23. CVE-2026-124899

    Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  24. CVE-2026-124900

    Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Memory safety Browser & mail

    9.6 CRITICAL 0.3% exploit odds Fix listed
  25. CVE-2026-124901

    Other issue in the Networking: JAR component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Other Browser & mail

    unscored 0.2% exploit odds Fix listed
  26. CVE-2026-124902

    Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Other Browser & mail

    unscored 0.2% exploit odds Fix listed
  27. CVE-2026-124903

    Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    9.6 CRITICAL 0.3% exploit odds Fix listed
  28. CVE-2026-124887

    Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  29. CVE-2026-124888

    Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  30. CVE-2026-124889

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  31. CVE-2026-124890

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  32. CVE-2026-124891

    Incorrect boundary conditions in the DOM: Selection component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  33. CVE-2026-124892

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  34. CVE-2026-124893

    Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  35. CVE-2026-124894

    Use-after-free in the Networking: Cookies component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  36. CVE-2026-124881

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  37. CVE-2026-124882

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  38. CVE-2026-124883

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  39. CVE-2026-124884

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  40. CVE-2026-124885

    Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  41. CVE-2026-124886

    Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    unscored 0.2% exploit odds Fix listed
  42. CVE-2026-124874

    Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Other Browser & mail

    unscored 0.2% exploit odds Fix listed
  43. CVE-2026-124875

    Incorrect boundary conditions in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  44. CVE-2026-124876

    Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  45. CVE-2026-124877

    Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  46. CVE-2026-124878

    Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  47. CVE-2026-124879

    Invalid pointer in the Networking: Cache component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    unscored 0.2% exploit odds Fix listed
  48. CVE-2026-124880

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  49. CVE-2026-124866

    Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed
  50. CVE-2026-124867

    Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

    Memory safety Browser & mail

    8.8 HIGH 0.4% exploit odds Fix listed

The newest published CVE records from CVE.org and NVD, refreshed every few minutes, with severity, exploit odds and fix status.