CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-118027Frame poisoning in the Layout componentMozilla Firefox
- CVE-2026-118026Invalid pointer in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118025Other issue in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118024Use-after-free in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118023Sandbox escape due to use-after-free in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118022Sandbox escape due to use-after-free in the Disability Access APIs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118021Sandbox escape due to use-after-free in the XPCOM componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118020Use-after-free in the Layout componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118019Race condition, use-after-free in the DOM: File componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118018Spoofing issue in the Downloads component in Firefox for AndroidMozilla Firefox
- CVE-2026-118017Use-after-free in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118016Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118015Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118014Use-after-free in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118013Use-after-free in the Layout: Images, Video, and HTML Frames componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118012Use-after-free in the DOM: Animation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118011Frame poisoning in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118010Use-after-free in the Disability Access APIs componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118009Integer overflow, use-after-free in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118008Privilege escalation in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118007Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118006Privilege escalation due to use-after-free in the WebRTC: Signaling componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118005Use-after-free in the WebRTC: Signaling componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118004Incorrect boundary conditions in the CSS Transitions and Animations componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118003Information disclosure in the Networking: DNS componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118002Information disclosure due to race condition in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-118000Information disclosure in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117999Race condition in the IPC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117998Mitigation bypass in the DOM: Push Subscriptions componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-117997Sandbox escape due to use-after-free in the Widget componentMozilla Firefox · Mozilla Thunderbird