Export limit exceeded: 425871 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (425871 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-124852 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124867 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124871 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124878 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124900 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 9.6 Critical
Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124904 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124908 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124911 1 Mozilla 1 Firefox 2026-11-14 6.1 Medium
Clickjacking issue in the Autofill component in Firefox for Android. This vulnerability was fixed in Firefox 160.
CVE-2026-124920 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 6.1 Medium
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124921 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 6.1 Medium
Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124923 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 6.1 Medium
Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124925 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 4.3 Medium
Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124928 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 6.1 Medium
Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124936 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 3.4 Low
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124937 1 Mozilla 1 Firefox 2026-11-14 3.4 Low
Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160.
CVE-2026-124943 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 8.8 High
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124945 1 Mozilla 2 Firefox, Thunderbird 2026-11-14 3.4 Low
Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-83894 1 Microsoft 8 Windows 11 24h2, Windows 11 24h2, Windows 11 25h2 and 5 more 2026-11-14 7 High
Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.
CVE-2026-59606 1 Google 1 Android 2026-11-14 6.7 Medium
In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure software due to a permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59618 1 Google 1 Android 2026-11-14 4.0 Medium
In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffers due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.