CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 18:50 UTC )
This data is behind schedule: last updated 2026-10-19 18:50 UTC. We are working on it.Behind: CVE records (cvelistV5).
This week: 5,374 CVEs published, 347 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,374 Show in the list Critical, last 7 days 347 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product mozilla:thunderbird . Show all products
635 CVEs, showing 601 to 635 Previous Page 13 of 13 CVE Severity Title Published CVE-2026-109749 Medium 5.4 Use-after-free in the JavaScript: WebAssembly component Assigned by mozilla
Oct 13, 2026 CVE-2026-109750 Not yet scored Site isolation issue in the DOM: Web Authentication component Assigned by mozilla
Oct 13, 2026 CVE-2026-109751 Medium 4.3 Information disclosure in the Networking component Assigned by mozilla
Oct 13, 2026 CVE-2026-109752 Medium 5.4 Use-after-free in the DOM: Workers component Assigned by mozilla
Oct 13, 2026 CVE-2026-109754 High 8.1 Incorrect boundary conditions in the DOM: Editor component Assigned by mozilla
Oct 13, 2026 CVE-2026-109755 Critical 9.6 Sandbox escape in the DOM: Content Processes component Assigned by mozilla
Oct 13, 2026 CVE-2026-109756 High 8.8 Privilege escalation in the DOM: Navigation component Assigned by mozilla
Oct 13, 2026 CVE-2026-109757 High 8.3 Sandbox escape due to race condition in the Networking component Assigned by mozilla
Oct 13, 2026 CVE-2026-109759 High 8.1 Site isolation issue in the Networking component Assigned by mozilla
Oct 13, 2026 CVE-2026-109760 High 8.1 Mitigation bypass in the Networking: HTTP component Assigned by mozilla
Oct 13, 2026 CVE-2026-109761 Medium 5.4 Use-after-free in the JavaScript: WebAssembly component Assigned by mozilla
Oct 13, 2026 CVE-2026-109762 Not yet scored Incorrect boundary conditions in the SVG component Assigned by mozilla
Oct 13, 2026 CVE-2026-109763 Not yet scored Mitigation bypass in the File Handling component Assigned by mozilla
Oct 13, 2026 CVE-2026-109764 Not yet scored Mitigation bypass in the Enterprise Policies component Assigned by mozilla
Oct 13, 2026 CVE-2026-109765 Medium 4.2 Race condition, use-after-free in the Graphics: Text component Assigned by mozilla
Oct 13, 2026 CVE-2026-109766 High 8.1 Mitigation bypass in the Enterprise Policies component Assigned by mozilla
Oct 13, 2026 CVE-2026-109767 Medium 4.3 Information disclosure in the Networking component Assigned by mozilla
Oct 13, 2026 CVE-2026-109768 Medium 6.5 Denial-of-service in the Site Reports component Assigned by mozilla
Oct 13, 2026 CVE-2026-109769 Medium 4.3 Information disclosure in the Networking: Cache component Assigned by mozilla
Oct 13, 2026 CVE-2026-109770 Not yet scored Spoofing issue in the DOM: Web Serial component Assigned by mozilla
Oct 13, 2026 CVE-2026-109771 Medium 4.3 Information disclosure in the WebRTC: Networking component Assigned by mozilla
Oct 13, 2026 CVE-2026-109772 Not yet scored Same-origin policy bypass in the DevTools component Assigned by mozilla
Oct 13, 2026 CVE-2026-109773 Medium 6.5 Denial-of-service in the Sync component Assigned by mozilla
Oct 13, 2026 CVE-2026-109774 Not yet scored Invalid pointer, undefined behavior in the DOM: Notifications component Assigned by mozilla
Oct 13, 2026 CVE-2026-109775 Medium 6.5 Denial-of-service in the WebRTC component Assigned by mozilla
Oct 13, 2026 CVE-2026-109776 Medium 4.2 Race condition in the XPCOM component Assigned by mozilla
Oct 13, 2026 CVE-2026-109777 Medium 4.3 Information disclosure in the Storage: IndexedDB component Assigned by mozilla
Oct 13, 2026 CVE-2026-109778 High 8.8 Privilege escalation in the WebExtensions component Assigned by mozilla
Oct 13, 2026 CVE-2026-109779 Medium 4.2 Race condition in the Networking: DNS component Assigned by mozilla
Oct 13, 2026 CVE-2026-109780 Not yet scored Mitigation bypass in the DOM: Core & HTML component Assigned by mozilla
Oct 13, 2026 CVE-2026-109781 Medium 6.5 Denial-of-service in the Printing: Output component Assigned by mozilla
Oct 13, 2026 CVE-2026-109782 Not yet scored Mitigation bypass in the File Handling component Assigned by mozilla
Oct 13, 2026 CVE-2026-109783 Not yet scored Mitigation bypass in the File Handling component Assigned by mozilla
Oct 13, 2026 CVE-2026-110247 Not yet scored Integer overflow in libmime buffer growth could lead to heap corruption Assigned by mozilla
Oct 13, 2026 CVE-2026-110249 Not yet scored Denial-of-service in the Exchange email component Assigned by mozilla
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
