CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-117876Use-after-free in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117875Use-after-free in the Layout: Scrolling and Overflow componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117874Use-after-free in the Internationalization componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117873Incorrect boundary conditions in the Audio/Video: Playback componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117872Use-after-free in the JavaScript: Standard Library componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117871Invalid pointer in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117870Use-after-free in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117869Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117868Sandbox escape in the DOM: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117867Use-after-free in the Layout componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117866Privilege escalation due to use-after-free in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117865Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117864Sandbox escape in the Form Manager componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117863Information disclosure due to uninitialized memory in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117862Privilege escalation due to incorrect boundary conditions in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117861Sandbox escape in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117860Same-origin policy bypass in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117504a2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of servicea2aproject a2a-go
- CVE-2026-90725Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-117503a2aproject a2a-go REST SSE handler rest.go resource consumptiona2aproject a2a-go
- CVE-2026-68866PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 releaseDell PowerProtect Data Domain
- CVE-2026-90726Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 reDell PowerProtect Data Domain
- CVE-2026-90727Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025…Dell PowerProtect Data Domain
- CVE-2026-94347PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70,Dell PowerProtect Data Domain Virtual Edition
- CVE-2026-10537Remote unauthenticated information disclosure and denial of service due to unauthenticated service accessBMC Control-M/Enterprise Manager · BMC Control-M/Server
- CVE-2026-94346PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70,Dell PowerProtect Data Domain Virtual Edition
- CVE-2026-16307IDOR in Netiket Information Technologies' EdoWEBNetiket Information Technologies EdoWEB
- CVE-2026-12887In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the…Octopus Deploy Octopus Server
- CVE-2026-117603Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypassspesmilo electrum
- CVE-2026-117602Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Executionspesmilo electrum