Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Produkt nieustalony | CVE-2026-117965 Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117966 Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117967 Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117968 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117969 Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117970 Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117960 Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
4,7 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117961 Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117962 Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
9,6 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117963 Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117964 Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117951 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117952 Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117953 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117954 Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117955 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117956 Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117957 Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117958 Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117959 Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117944 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117945 Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
9,8 | 0,51 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117946 Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
9,8 | 0,53 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117947 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,3 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117948 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 14.11.2026, 15:02 UTC – 14.11.2026, 20:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.