Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Integer overflow in the Audio/Video component.Check if you run itEPSS 0.71%Feb 24, 2026
- Critical9.8Incorrect boundary conditions in the Web Audio component.Check if you run itEPSS 0.63%Feb 24, 2026
- Critical9.8Use-after-free in the Audio/Video: Playback component.Check if you run itEPSS 0.61%Feb 24, 2026
- Critical9.8Undefined behavior in the DOM: Core & HTML component.Check if you run itEPSS 0.63%Feb 24, 2026
- Critical9.8Use-after-free in the DOM: Bindings (WebIDL) component.Check if you run itEPSS 0.61%Feb 24, 2026
- High8.8Use-after-free in the Storage: IndexedDB component.Check if you run itEPSS 0.61%Feb 24, 2026
- Critical10.0Sandbox escape in the Storage: IndexedDB component.Check if you run itEPSS 0.58%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript: WebAssembly component.Check if you run itEPSS 0.61%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine: JIT component.Check if you run itEPSS 0.61%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine component.Check if you run itEPSS 0.61%Feb 24, 2026
- Critical9.8JIT miscompilation, use-after-free in the JavaScript Engine: JIT component.Check if you run itEPSS 0.61%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript Engine component.Check if you run itEPSS 0.61%Feb 24, 2026
- Critical9.8Integer overflow in the JavaScript: Standard Library component.Check if you run itEPSS 0.71%Feb 24, 2026
- Critical10.0Sandbox escape in the Graphics: WebRender component.Check if you run itEPSS 0.63%Feb 24, 2026
- Critical10.0Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.Check if you run itEPSS 0.63%Feb 24, 2026
- Critical9.8Incorrect boundary conditions in the Graphics: ImageLib component.Check if you run itEPSS 0.63%Feb 24, 2026
- Critical9.8Use-after-free in the JavaScript: GC component.Check if you run itEPSS 0.61%Feb 24, 2026
- Critical9.8Incorrect boundary conditions in the WebRTC: Audio/Video component.Check if you run itEPSS 0.63%Feb 24, 2026
- Critical9.8Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled page…Check if you run itEPSS 0.48%Feb 24, 2026
- UnknownFirefox Incorrect Handle Sandbox EscapePatch nowKEVEPSS 1.94%Jan 20, 2026
- Critical9.4Ray-Project Ray Code Injection VulnerabilityPatch nowKEVEPSS 62.46%Nov 26, 2025
- High8.1Memory safety bugs present in Firefox 139 and Thunderbird 139.Check if you run itEPSS 4.26%Jun 24, 2025
- High8.1If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the file extension.Check this weekEPSS 46.00%Jun 24, 2025
- Medium4.3The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user intoCheck this weekEPSS 28.00%Jun 24, 2025
- Critical9.8If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complCheck this weekEPSS 30.00%Jun 24, 2025