Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-117872 | not reported | — | No | Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 1... | 2026-10-27 |
| CVE-2026-117871 | not reported | — | No | Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird... | 2026-10-27 |
| CVE-2026-117870 | not reported | — | No | Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thund... | 2026-10-27 |
| CVE-2026-117869 | not reported | — | No | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunde... | 2026-10-27 |
| CVE-2026-117868 | not reported | — | No | Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunder... | 2026-10-27 |
| CVE-2026-117867 | not reported | — | No | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159,... | 2026-10-27 |
| CVE-2026-117866 | not reported | — | No | Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115... | 2026-10-27 |
| CVE-2026-117865 | not reported | — | No | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunder... | 2026-10-27 |
| CVE-2026-117864 | not reported | — | No | Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbi... | 2026-10-27 |
| CVE-2026-117863 | not reported | — | No | Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 11... | 2026-10-27 |
| CVE-2026-117862 | not reported | — | No | Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox... | 2026-10-27 |
| CVE-2026-117861 | not reported | — | No | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunde... | 2026-10-27 |
| CVE-2026-117860 | not reported | — | No | Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159,... | 2026-10-27 |
| CVE-2026-116469 | not reported | — | No | MISP Guard, a proxy-based security filter for MISP feed distribution, contains a case-sensitivity flaw in multiple policy enforcement checks... | 2026-10-27 |
| CVE-2026-113869 | medium | 5.4 | No | When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME messa... | 2026-10-27 |
| CVE-2026-110247 | high | 8.4 | No | Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message th... | 2026-10-27 |
| CVE-2026-100801 | high | 8.8 | No | Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,... | 2026-10-27 |
| CVE-2024-36345 | not reported | — | No | Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out... | 2026-10-27 |
| CVE-2024-48519 | medium | 6.2 | No | Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial... | 2026-10-27 |
| CVE-2024-55045 | high | 7.3 | No | Firmament-Autopilot FMT-Firmware commit de5aec was discovered to contain a buffer overflow via the task_mavobc_entry function at /comm/task_... | 2026-10-27 |