Export limit exceeded: 413835 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found '‑' (at char 7), (line:1, col:8)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (413835 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-124870 2026-11-10 8.8 High
Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124869 2026-11-10 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124868 2026-11-10 8.8 High
Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124867 2026-11-10 8.8 High
Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160.
CVE-2026-124866 2026-11-10 8.8 High
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124865 2026-11-10 8.8 High
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124864 2026-11-10 9.6 Critical
Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124863 2026-11-10 8.8 High
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124862 2026-11-10 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124861 2026-11-10 9.6 Critical
Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124860 2026-11-10 8.8 High
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124859 2026-11-10 9.6 Critical
Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124858 2026-11-10 8.8 High
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124857 2026-11-10 8.8 High
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124856 2026-11-10 8.8 High
Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124853 2026-11-10 9.6 Critical
Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
CVE-2026-124852 2026-11-10 8.8 High
Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160.
CVE-2026-121248 1 Google 1 Chrome 2026-11-10 6.5 Medium
Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-121231 1 Google 1 Chrome 2026-11-10 6.5 Medium
Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121209 1 Google 1 Chrome 2026-11-10 4.3 Medium
UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)