Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (3790 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-74972 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 4.3 Medium
Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74973 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 4.2 Medium
Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74974 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 5.4 Medium
Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74964 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 9.8 Critical
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74953 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 8.8 High
Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74941 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 8.8 High
Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74939 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 8.8 High
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74935 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 8.8 High
Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74942 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 8.8 High
Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2020-6830 1 Mozilla 1 Firefox Mobile 2026-08-19 7.5 High
For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was being used for JS-to-native also, but it isn't needed in this case, and its usage was also leaking this token. This vulnerability affects Firefox for iOS < 25.
CVE-2023-5758 1 Mozilla 1 Firefox Mobile 2026-08-19 6.1 Medium
When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack. This vulnerability affects Firefox for iOS < 119.
CVE-2020-12404 1 Mozilla 1 Firefox Mobile 2026-08-19 4.3 Medium
For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS < 26.
CVE-2023-49060 1 Mozilla 1 Firefox Mobile 2026-08-19 9.8 Critical
An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.
CVE-2023-49061 1 Mozilla 1 Firefox Mobile 2026-08-19 6.1 Medium
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.
CVE-2020-15662 1 Mozilla 1 Firefox Mobile 2026-08-19 6.5 Medium
A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in the user downloading an unintended file. This vulnerability affects Firefox for iOS < 28.
CVE-2022-31746 1 Mozilla 1 Firefox Mobile 2026-08-19 6.5 Medium
Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS < 102.
CVE-2020-15661 1 Mozilla 1 Firefox Mobile 2026-08-19 6.5 Medium
A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in leaking a password for the current domain. This vulnerability affects Firefox for iOS < 28.
CVE-2020-12414 1 Mozilla 1 Firefox Mobile 2026-08-19 6.5 Medium
IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS < 27.
CVE-2019-17003 1 Mozilla 1 Firefox Mobile 2026-08-19 6.1 Medium
Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.
CVE-2020-12401 2 Mozilla, Redhat 4 Firefox, Firefox Mobile, Enterprise Linux and 1 more 2026-08-19 4.7 Medium
During ECDSA signature generation, padding applied in the nonce designed to ensure constant-time scalar multiplication was removed, resulting in variable-time execution dependent on secret data. This vulnerability affects Firefox < 80 and Firefox for Android < 80.