Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

30408

Tracked CVEs

2981

Critical

377

Exploited in wild

4965

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page874
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code373
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

182 matches

CVE-2026-92240Low· 3.4

6d ago

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnera…

▾ SunlitMozilla · ThunderbirdEPSS 0.21%via NVD

CVE-2026-92239Medium· 6.1

6d ago

A maliciously constructed IMAP line could cause an out-of-bounds buffer read

A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ SunlitMozilla · ThunderbirdEPSS 0.18%via NVD

CVE-2026-92238Medium· 6.1

6d ago

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ SunlitMozilla · ThunderbirdEPSS 0.18%via NVD

CVE-2026-92079Low· 3.4

6d ago

Mitigation bypass in the Widget: Win32 component

Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.15%via NVD

CVE-2026-92078Medium· 6.5⚖ disputed

6d ago

Denial-of-service in the Security component

Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.23%via NVD

CVE-2026-92077Medium· 6.5⚖ disputed

6d ago

Denial-of-service in the SVG component

Denial-of-service in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.29%via NVD

CVE-2026-92076Low· 3.4

6d ago

Incorrect boundary conditions in the Networking component

Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.15%via NVD

CVE-2026-92075Low· 3.4

6d ago

Mitigation bypass in the Networking component

Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.16%via NVD

CVE-2026-92074Low· 3.4

6d ago

Mitigation bypass in the Popup Blocker component

Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.16%via NVD

CVE-2026-92006High· 8.8

6d ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16…

▾ TwilightMozilla · FirefoxEPSS 0.35%via NVD

CVE-2026-92015High· 8.8

6d ago

Privilege escalation in the WebExtensions component

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92007High· 8.8

6d ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92005Medium· 5.3⚖ disputed

6d ago

Use-after-free in the Audio/Video: Web Codecs component

Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.38%via NVD

CVE-2026-92013High· 8.8

6d ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92008High· 8.8

6d ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92011High· 8.8

6d ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92010High· 8.8

6d ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92009High· 8.8

6d ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92014High· 8.8

6d ago

Privilege escalation due to incorrect boundary conditions in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

▾ TwilightMozilla · FirefoxEPSS 0.26%via NVD

CVE-2026-92012High· 8.8

6d ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92016High· 8.8

6d ago

Use-after-free in the Disability Access APIs component

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.33%via NVD

CVE-2026-92017High· 8.8

6d ago

Privilege escalation in the DOM: Service Workers component

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.26%via NVD

CVE-2026-92020High· 8.8

6d ago

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, …

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD

CVE-2026-92019High· 8.1

6d ago

Mitigation bypass in the Remote Settings Client component

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.17%via NVD

CVE-2026-92018Critical· 9.6⚖ disputed

6d ago

Sandbox escape in the DOM: Core & HTML component

Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ MidnightMozilla · FirefoxEPSS 0.35%via NVD

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird

A maliciously constructed IMAP line could cause an out-of-bounds buffer read

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations

Mitigation bypass in the Widget: Win32 component

Denial-of-service in the Security component

Denial-of-service in the SVG component

Incorrect boundary conditions in the Networking component

Mitigation bypass in the Networking component

Mitigation bypass in the Popup Blocker component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation in the WebExtensions component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Use-after-free in the Audio/Video: Web Codecs component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Use-after-free in the Disability Access APIs component

Privilege escalation in the DOM: Service Workers component

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

Mitigation bypass in the Remote Settings Client component

Sandbox escape in the DOM: Core & HTML component

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird

A maliciously constructed IMAP line could cause an out-of-bounds buffer read

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations

Mitigation bypass in the Widget: Win32 component

Denial-of-service in the Security component

Denial-of-service in the SVG component

Incorrect boundary conditions in the Networking component

Mitigation bypass in the Networking component

Mitigation bypass in the Popup Blocker component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation in the WebExtensions component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Use-after-free in the Audio/Video: Web Codecs component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Use-after-free in the Disability Access APIs component

Privilege escalation in the DOM: Service Workers component

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

Mitigation bypass in the Remote Settings Client component

Sandbox escape in the DOM: Core & HTML component

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live