Export limit exceeded: 425948 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 425948 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (425948 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-124900 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-14 | 9.6 Critical |
| Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124904 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-14 | 8.8 High |
| Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124908 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-14 | 8.8 High |
| Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124911 | 1 Mozilla | 1 Firefox | 2026-11-14 | 6.1 Medium |
| Clickjacking issue in the Autofill component in Firefox for Android. This vulnerability was fixed in Firefox 160. | ||||
| CVE-2026-124920 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-14 | 6.1 Medium |
| Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124921 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-14 | 6.1 Medium |
| Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124923 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-14 | 6.1 Medium |
| Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124925 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-14 | 4.3 Medium |
| Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124928 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-14 | 6.1 Medium |
| Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124936 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-14 | 3.4 Low |
| Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124937 | 1 Mozilla | 1 Firefox | 2026-11-14 | 3.4 Low |
| Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160. | ||||
| CVE-2026-124943 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-14 | 8.8 High |
| Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124945 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-14 | 3.4 Low |
| Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-83894 | 1 Microsoft | 8 Windows 11 24h2, Windows 11 24h2, Windows 11 25h2 and 5 more | 2026-11-14 | 7 High |
| Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-59606 | 1 Google | 1 Android | 2026-11-14 | 6.7 Medium |
| In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure software due to a permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-59618 | 1 Google | 1 Android | 2026-11-14 | 4.0 Medium |
| In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffers due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-59635 | 1 Google | 1 Android | 2026-11-14 | 7.8 High |
| In cpb_cnt of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-95397 | 1 Google | 1 Android | 2026-11-14 | 7.8 High |
| In sub_layer_hrd_parameters of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-95401 | 1 Google | 1 Android | 2026-11-14 | 7.8 High |
| In knee_function_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-95784 | 2026-11-14 | 7.5 High | ||
| A vulnerability exists in a system component that may, under certain conditions, disrupt the availability of affected services. Successful exploitation could result in temporary service interruption or loss of functionality. | ||||