Export limit exceeded: 414964 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 414964 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 414964 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (414964 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-57037 | 2026-11-10 | N/A | ||
| In getChppAppState of chpp_init.cc, there is a possible way to trigger an out of bounds read and corrupt task control structures due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-125041 | 2 Red Hat, Redhat | 3 Enterprise Linux, Enterprise Linux, Rhel Els | 2026-11-10 | 5.5 Medium |
| A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer. When processing an uncompressed video track, qtdemux fails to validate the declared row alignment and chroma geometry before using them to build a video buffer layout. A crafted file can cause an out-of-bounds heap read while the sample is copied, potentially crashing the application and causing denial of service. | ||||
| CVE-2026-124992 | 1 Nushell | 1 Nushell | 2026-11-10 | 3.3 Low |
| A vulnerability was identified in nushell up to 0.116.1. Impacted is the function escape_bytes of the file crates/nu-json/src/ser.rs of the component Data Conversion Handler. The manipulation leads to improper neutralization of escape, meta, or control sequences. The attack must be carried out locally. The pull request to fix this issue awaits acceptance. | ||||
| CVE-2026-124950 | 2026-11-10 | 3.4 Low | ||
| Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124949 | 2026-11-10 | 3.4 Low | ||
| Other issue in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124947 | 2026-11-10 | 8.8 High | ||
| Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-57036 | 2026-11-10 | N/A | ||
| In send_vdu_directive of gdmc/gsp/dev/bmsm/plat/lga/vdu.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-124946 | 2026-11-10 | 3.4 Low | ||
| Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124945 | 2026-11-10 | 3.4 Low | ||
| Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124944 | 2026-11-10 | 4.3 Medium | ||
| Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124943 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124936 | 2026-11-10 | 3.4 Low | ||
| Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-57010 | 2026-11-10 | N/A | ||
| In EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-124928 | 2026-11-10 | 6.1 Medium | ||
| Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124925 | 2026-11-10 | 4.3 Medium | ||
| Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124923 | 2026-11-10 | 6.1 Medium | ||
| Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-57009 | 2026-11-10 | N/A | ||
| In GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-124921 | 2026-11-10 | 6.1 Medium | ||
| Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-124920 | 2026-11-10 | 6.1 Medium | ||
| Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160. | ||||
| CVE-2026-57005 | 2026-11-10 | N/A | ||
| In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputy. This could lead to remote escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||