Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Produkt nieustalony | CVE-2026-118013 Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118014 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118015 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118016 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118017 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118018 Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159. |
8,8 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118019 Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7. |
8,8 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118020 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118021 Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7. |
8,8 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118022 Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118003 Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118004 Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118005 Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118006 Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118007 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7. |
8,8 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118008 Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118009 Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118010 Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-118011 Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. |
8,8 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117991 Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117992 Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,5 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117993 Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117994 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117995 Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117996 Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 14.11.2026, 15:02 UTC – 14.11.2026, 20:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.