2026 CVEs (page 17)
Page 17 of 659 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-100819 | Critical | 9.6 | 2026-09-29 | Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140… |
CVE-2026-100818 | Critical | 9.6 | 2026-09-29 | Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thun… |
CVE-2026-100817 | Medium | 5.4 | 2026-09-29 | Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100816 | High | 8.1 | 2026-09-29 | Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
CVE-2026-100815 | High | 8.8 | 2026-09-29 | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox… |
CVE-2026-100814 | High | 8.8 | 2026-09-29 | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, a… |
CVE-2026-100813 | High | 8.8 | 2026-09-29 | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100812 | Medium | 6.5 | 2026-09-29 | Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
CVE-2026-100811 | Critical | 9.6 | 2026-09-29 | Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… |
CVE-2026-100810 | Critical | 9.8 | 2026-09-29 | Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100809 | High | 8.1 | 2026-09-29 | Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
CVE-2026-100808 | High | 8.8 | 2026-09-29 | Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
CVE-2026-100807 | High | 8.8 | 2026-09-29 | Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird… |
CVE-2026-100806 | Medium | 4.3 | 2026-09-29 | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
CVE-2026-100805 | High | 7.5 | 2026-09-29 | Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100804 | Critical | 9.6 | 2026-09-29 | Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100803 | High | 8.1 | 2026-09-29 | Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 1… |
CVE-2026-100802 | Medium | 4.3 | 2026-09-29 | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100801 | High | 8.8 | 2026-09-29 | Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4… |
CVE-2026-100800 | Critical | 9.6 | 2026-09-29 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 1… |
CVE-2026-100799 | Medium | 4.3 | 2026-09-29 | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100798 | High | 8.1 | 2026-09-29 | Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
CVE-2026-100797 | High | 8.8 | 2026-09-29 | Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbir… |
CVE-2026-100796 | High | 8.8 | 2026-09-29 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100795 | Medium | 6.5 | 2026-09-29 | Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100794 | Critical | 9.6 | 2026-09-29 | Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157… |
CVE-2026-100793 | Medium | 6.5 | 2026-09-29 | JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100792 | High | 7.1 | 2026-09-29 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbir… |
CVE-2026-100791 | High | 8.8 | 2026-09-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi… |
CVE-2026-100790 | High | 8.8 | 2026-09-29 | Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, F… |
CVE-2026-100789 | High | 8.8 | 2026-09-29 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4… |
CVE-2026-100788 | Critical | 9.8 | 2026-09-29 | Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 1… |
CVE-2026-100787 | Critical | 9.6 | 2026-09-29 | Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
CVE-2026-100786 | Critical | 9.6 | 2026-09-29 | Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunder… |
CVE-2026-100785 | High | 8.8 | 2026-09-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi… |
CVE-2026-100784 | High | 8.8 | 2026-09-29 | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153… |
CVE-2026-100783 | Medium | 4.3 | 2026-09-29 | Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F… |
CVE-2026-100782 | High | 8.8 | 2026-09-29 | Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunde… |
CVE-2026-100781 | Critical | 9.6 | 2026-09-29 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, T… |
CVE-2026-100780 | High | 8.8 | 2026-09-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi… |
CVE-2026-100779 | High | 8.8 | 2026-09-29 | Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, F… |
CVE-2026-100778 | Critical | 9.6 | 2026-09-29 | Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17… |
CVE-2026-100777 | High | 8.8 | 2026-09-29 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4… |
CVE-2026-100776 | High | 8.8 | 2026-09-29 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 15… |
CVE-2026-100775 | Critical | 9.6 | 2026-09-29 | Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 15… |
CVE-2026-100774 | High | 8.8 | 2026-09-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi… |
CVE-2026-100773 | High | 8.8 | 2026-09-29 | Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4… |
CVE-2026-100772 | High | 8.8 | 2026-09-29 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi… |
CVE-2026-100771 | High | 8.1 | 2026-09-29 | Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi… |
CVE-2026-100770 | Critical | 9.6 | 2026-09-29 | Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 1… |
CVE-2026-100769 | High | 8.8 | 2026-09-29 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 15… |
CVE-2026-100768 | High | 8.8 | 2026-09-29 | Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100767 | High | 8.8 | 2026-09-29 | Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F… |
CVE-2026-100766 | Medium | 4.3 | 2026-09-29 | Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 15… |
CVE-2026-100765 | High | 8.8 | 2026-09-29 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
CVE-2026-100764 | High | 8.8 | 2026-09-29 | Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100763 | Critical | 9.1 | 2026-09-29 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100762 | Critical | 9.6 | 2026-09-29 | Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 1… |
CVE-2026-100761 | High | 8.8 | 2026-09-29 | Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157. |
CVE-2026-100760 | Critical | 9.6 | 2026-09-29 | Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefo… |
CVE-2026-100759 | High | 8.1 | 2026-09-29 | Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbi… |
CVE-2026-100758 | Critical | 9.6 | 2026-09-29 | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fir… |
CVE-2026-100757 | High | 8.8 | 2026-09-29 | Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157… |
CVE-2026-100756 | High | 8.1 | 2026-09-29 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, T… |
CVE-2026-95520 | High | 7.1 | 2026-09-29 | A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAG_LONGFILESIZES value is 0xFFFFFFFF… |
CVE-2026-87748 | High | 8.8 | 2026-09-29 | Missing Authorization vulnerability in Interprobe Information Technologies Inc. Qorela DC allows Privilege Abuse. This issue affects Qorela DC: from 1.6.1-RC2… |
CVE-2026-85520 | | 2026-09-29 | Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated a… | |
CVE-2026-73597 | Medium | 6.5 | 2026-09-29 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated… |
CVE-2026-73596 | Low | 3.8 | 2026-09-29 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability… |
CVE-2026-73595 | Medium | 4.7 | 2026-09-29 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vul… |
CVE-2026-73594 | Medium | 6.4 | 2026-09-29 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerabili… |
CVE-2026-73593 | Low | 3.0 | 2026-09-29 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with lo… |
CVE-2026-66083 | Medium | 6.5 | 2026-09-29 | The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpoint to obtain infor… |
CVE-2026-41875 | | 2026-09-29 | Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, wi… | |
CVE-2026-102507 | Medium | 5.7 | 2026-09-29 | Sliver C2 framework version 1.7.7 and earlier contains an unhandled panic vulnerability in the operator gRPC handler that allows an attacker controlling a comp… |
CVE-2026-102497 | High | 7.5 | 2026-09-29 | The Apache XmlSchema walker (xmlschema-walker) doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious sch… |
CVE-2026-102496 | High | 7.5 | 2026-09-29 | Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until… |
CVE-2026-102495 | High | 7.5 | 2026-09-29 | Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows… |
CVE-2026-101266 | | 2026-09-29 | A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps. | |
CVE-2026-95509 | | 2026-09-29 | Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg() formatting by an incorrect buffer size calculation, causing out-of-bou… | |
CVE-2026-96423 | Medium | 5.5 | 2026-09-29 | X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-96422 | Medium | 5.5 | 2026-09-29 | Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-96421 | Medium | 5.5 | 2026-09-29 | USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-96420 | Medium | 4.7 | 2026-09-29 | Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-96419 | Medium | 5.5 | 2026-09-29 | Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution |
CVE-2026-96418 | Medium | 5.5 | 2026-09-29 | TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-96417 | Medium | 5.5 | 2026-09-29 | RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-96416 | Medium | 5.5 | 2026-09-29 | IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-96415 | Medium | 5.5 | 2026-09-29 | Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-95395 | Medium | 5.5 | 2026-09-29 | IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-95394 | Medium | 4.7 | 2026-09-29 | Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-95393 | Medium | 4.7 | 2026-09-29 | CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-95392 | Medium | 5.5 | 2026-09-29 | MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-95391 | Medium | 5.5 | 2026-09-29 | ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service |
CVE-2026-95390 | Medium | 5.5 | 2026-09-29 | PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service |
CVE-2026-95389 | High | 8.1 | 2026-09-29 | SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-95388 | Medium | 5.5 | 2026-09-29 | Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-95387 | High | 8.1 | 2026-09-29 | SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-95386 | Medium | 5.5 | 2026-09-29 | TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service |
CVE-2026-8937 | Medium | 4.3 | 2026-09-29 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain co… |