Export limit exceeded: 415391 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '/' (at char 38), (line:1, col:39)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (415391 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-118017 2026-10-27 N/A
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159.
CVE-2026-118016 2026-10-27 N/A
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159.
CVE-2026-118015 2026-10-27 N/A
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159.
CVE-2026-118014 2026-10-27 N/A
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159.
CVE-2026-118010 2026-10-27 N/A
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159.
CVE-2026-118009 2026-10-27 N/A
Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159.
CVE-2026-109708 1 Mozilla 1 Firefox 2026-10-27 9.6 Critical
Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.44.
CVE-2026-118004 2026-10-27 N/A
Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-118003 2026-10-27 N/A
Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-117993 2026-10-27 N/A
Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-117990 2026-10-27 N/A
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-117989 2026-10-27 N/A
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-117988 2026-10-27 N/A
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-117987 2026-10-27 N/A
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-117986 2026-10-27 N/A
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-117985 2026-10-27 N/A
Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-117984 2026-10-27 N/A
Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-105711 1 Gitlab 1 Gitlab 2026-10-27 3.5 Low
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could have read the confidential issue's title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users.
CVE-2026-117983 2026-10-27 N/A
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
CVE-2026-117982 2026-10-27 N/A
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.