Export limit exceeded: 423702 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 423702 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (423702 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-124909 | 2026-11-10 | 4.3 Medium | ||
| Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124907 | 2026-11-10 | 8.8 High | ||
| Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-40275 | 2026-11-10 | 8.4 High | ||
| Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel. | ||||
| CVE-2026-124906 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124905 | 2026-11-10 | N/A | ||
| Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124903 | 2026-11-10 | 9.6 Critical | ||
| Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124902 | 2026-11-10 | N/A | ||
| Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124901 | 2026-11-10 | N/A | ||
| Other issue in the Networking: JAR component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124899 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124898 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-116567 | 2 Freeswitch, Signalwire | 2 Freeswitch, Freeswitch | 2026-11-10 | 7.5 High |
| FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmp_handle_control() rendered an RTMP user-control message into a 200-byte stack buffer using an unbounded sprintf loop controlled by the wire message length. A body of roughly 70 bytes or more overflowed the stack before any RTMP login, because the handshake authenticates neither side. The flaw affects deployments that build and load mod_rtmp, which is disabled in the stock build and configuration but commonly exposes a listener on TCP port 1935 when enabled. One unauthenticated message can crash FreeSWITCH and end every active call; the constrained ASCII hex output has not yielded control-flow hijacking. This issue is fixed in version 1.11.2. | ||||
| CVE-2026-124897 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124896 | 2026-11-10 | N/A | ||
| Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124895 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the Storage: localStorage & sessionStorage component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124894 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the Networking: Cookies component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124893 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124892 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124891 | 2026-11-10 | 8.8 High | ||
| Incorrect boundary conditions in the DOM: Selection component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124890 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, and Thunderbird 160. | ||||
| CVE-2026-124889 | 2026-11-10 | 8.8 High | ||
| Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160. | ||||