VulnSea

Tagged “cve.org”

CVEs tagged cve.org, newest first.

18338 CVEsRSS

CVE-2026-15609Medium· 6.4
2w ago

The Bridge - Creative Multipurpose WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute in all versions up to, and including, 30.8.9.1 due to insufficient input sanitizati…

The Bridge - Creative Multipurpose WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute in all versions up to, and including, 30.8.9.1 due to insufficient input sanitizati…

▾ SunlitQODE · Bridge - Creative Multipurpose WordPress ThemeEPSS 0.19%via NVD
CVE-2026-14805High· 8.8
2w ago

The Consulting theme for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 6.7.16

The Consulting theme for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 6.7.16. This is due to a combination of two flaws: (1) the masterstudy_ms_stm_set_discard_transient AJAX endpoint in admin/admin-n…

▾ TwilightStylemixThemes · Consulting - Business, Finance WordPress ThemeEPSS 0.31%via NVD
CVE-2026-92006High· 8.8
2w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16…

▾ TwilightMozilla · FirefoxEPSS 0.35%via NVD
CVE-2026-92015High· 8.8
2w ago

Privilege escalation in the WebExtensions component

Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD
CVE-2026-92007High· 8.8
2w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16…

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD
CVE-2026-92005Medium· 5.3⚖ disputed
2w ago

Use-after-free in the Audio/Video: Web Codecs component

Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.38%via NVD
CVE-2026-92013High· 8.8
2w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16…

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD
CVE-2026-92008High· 8.8
2w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16…

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD
CVE-2026-92011High· 8.8
2w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16…

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD
CVE-2026-92010High· 8.8
2w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16…

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD
CVE-2026-92009High· 8.8
2w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16…

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD
CVE-2026-92014High· 8.8
2w ago

Privilege escalation due to incorrect boundary conditions in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16.

▾ TwilightMozilla · FirefoxEPSS 0.26%via NVD
CVE-2026-92012High· 8.8
2w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16…

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD
CVE-2026-92016High· 8.8
2w ago

Use-after-free in the Disability Access APIs component

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.33%via NVD
CVE-2026-92017High· 8.8
2w ago

Privilege escalation in the DOM: Service Workers component

Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.26%via NVD
CVE-2026-92020High· 8.8
2w ago

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component

Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, …

▾ TwilightMozilla · FirefoxEPSS 0.28%via NVD
CVE-2026-92019High· 8.1
2w ago

Mitigation bypass in the Remote Settings Client component

Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD
CVE-2026-92018Critical· 9.6⚖ disputed
2w ago

Sandbox escape in the DOM: Core & HTML component

Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ MidnightMozilla · FirefoxEPSS 0.35%via NVD
CVE-2026-92023High· 8.8
2w ago

Use-after-free in the XML component

Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD
CVE-2026-92021High· 8.8
2w ago

Use-after-free in the JavaScript Engine: JIT component

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.

▾ TwilightMozilla · FirefoxEPSS 0.30%via NVD
CVE-2026-92026High· 8.8
2w ago

Use-after-free in the Networking component

Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.33%via NVD
CVE-2026-92024High· 8.8
2w ago

Use-after-free in the SVG component

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD
CVE-2026-92022High· 8.8
2w ago

Use-after-free in the DOM: HTML Parser component

Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD
CVE-2026-92028High· 8.8
2w ago

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD
CVE-2026-92027High· 8.8
2w ago

Use-after-free in the DOM: Streams component

Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD
CVE-2026-92025High· 8.8
2w ago

Use-after-free in the DOM: Navigation component

Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD
CVE-2026-92030Medium· 5.4
2w ago

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ SunlitMozilla · FirefoxEPSS 0.24%via NVD
CVE-2026-92029High· 8.8
2w ago

Use-after-free in the SVG component

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ TwilightMozilla · FirefoxEPSS 0.34%via NVD
CVE-2026-92033High· 8.8
2w ago

Privilege escalation in Firefox for Android

Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.

▾ TwilightMozilla · FirefoxEPSS 0.37%via NVD
CVE-2026-92032Critical· 9.6⚖ disputed
2w ago

Sandbox escape due to invalid pointer in the Graphics component

Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

▾ MidnightMozilla · FirefoxEPSS 0.34%via NVD
CVEs tagged “cve.org” — page 300 · VulnSea