CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 20:10 UTC )
This week: 5,371 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,371 Show in the list Critical, last 7 days 344 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,748 Show in the list Showing CVEs that name the product mozilla:firefox . Show all products
CVE Severity Title Published CVE-2026-109716 High 8.1 Incorrect boundary conditions in the JavaScript Engine component Assigned by mozilla
Oct 13, 2026 CVE-2026-109718 Medium 5.4 Use-after-free in the XML component Assigned by mozilla
Oct 13, 2026 CVE-2026-109719 Medium 4.2 Race condition, use-after-free in the Graphics: CanvasWebGL component Assigned by mozilla
Oct 13, 2026 CVE-2026-109722 High 8.1 JIT miscompilation in the JavaScript Engine: JIT component Assigned by mozilla
Oct 13, 2026 CVE-2026-109725 Medium 5.4 Use-after-free in the DOM: Core & HTML component Assigned by mozilla
Oct 13, 2026 CVE-2026-109726 Medium 5.4 Use-after-free in the SVG component Assigned by mozilla
Oct 13, 2026 CVE-2026-109727 Medium 5.4 Use-after-free in the Audio/Video component Assigned by mozilla
Oct 13, 2026 CVE-2026-109728 Medium 5.4 Use-after-free in the DOM: Animation component Assigned by mozilla
Oct 13, 2026 CVE-2026-109729 Medium 5.4 Use-after-free in the JavaScript Engine: JIT component Assigned by mozilla
Oct 13, 2026 CVE-2026-109730 High 8.8 Integer overflow in the Graphics component Assigned by mozilla
Oct 13, 2026 CVE-2026-109732 Medium 5.4 Use-after-free in the DOM: Streams component Assigned by mozilla
Oct 13, 2026 CVE-2026-109733 High 8.1 JIT miscompilation in the JavaScript Engine: JIT component Assigned by mozilla
Oct 13, 2026 CVE-2026-109753 High 8.1 Incorrect boundary conditions in the Layout component Assigned by mozilla
Oct 13, 2026 CVE-2026-109704 High 8.8 Privilege escalation in the Application Update component Assigned by mozilla
Oct 13, 2026 CVE-2026-109705 Critical 9.6 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component Assigned by mozilla
Oct 13, 2026 CVE-2026-109707 Critical 9.6 Sandbox escape due to use-after-free in the Networking component Assigned by mozilla
Oct 13, 2026 CVE-2026-109708 Critical 9.6 Sandbox escape due to incorrect boundary conditions in the Networking component Assigned by mozilla
Oct 13, 2026 CVE-2026-109709 High 8.8 Information disclosure, privilege escalation in the Security: Process Sandboxing component Assigned by mozilla
Oct 13, 2026 CVE-2026-109711 Medium 5.4 Use-after-free in the Graphics: Canvas2D component Assigned by mozilla
Oct 13, 2026 CVE-2026-109713 Medium 5.4 Use-after-free in the Crash Reporting component Assigned by mozilla
Oct 13, 2026 CVE-2026-109714 Medium 5.4 Incorrect boundary conditions in the Layout component Assigned by mozilla
Oct 13, 2026 CVE-2026-109717 Medium 5.4 Use-after-free in the DOM: Bindings (WebIDL) component Assigned by mozilla
Oct 13, 2026 CVE-2026-109720 High 7.1 JIT miscompilation in the JavaScript: WebAssembly component Assigned by mozilla
Oct 13, 2026 CVE-2026-109721 Medium 5.4 Incorrect boundary conditions in the JavaScript Engine: JIT component Assigned by mozilla
Oct 13, 2026 CVE-2026-109723 Medium 5.4 Integer overflow in the Layout: Text and Fonts component Assigned by mozilla
Oct 13, 2026 CVE-2026-109724 Medium 5.4 Use-after-free in the DOM: Core & HTML component Assigned by mozilla
Oct 13, 2026 CVE-2026-109731 Medium 5.4 Incorrect boundary conditions in the Graphics: Canvas2D component Assigned by mozilla
Oct 13, 2026 CVE-2026-109734 High 8.1 Mitigation bypass in the DOM: Security component Assigned by mozilla
Oct 13, 2026 CVE-2026-109735 Medium 5.4 Use-after-free in the DOM: Animation component Assigned by mozilla
Oct 13, 2026 CVE-2026-109736 High 8.1 Frame poisoning in the Layout component Assigned by mozilla
Oct 13, 2026 CVE-2026-109737 High 8.1 Mitigation bypass in the Enterprise Policies component Assigned by mozilla
Oct 13, 2026 CVE-2026-109738 Medium 5.4 Use-after-free in the Audio/Video: Playback component Assigned by mozilla
Oct 13, 2026 CVE-2026-109739 High 8.8 Privilege escalation in the WebExtensions component Assigned by mozilla
Oct 13, 2026 CVE-2026-109740 Critical 9.6 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Assigned by mozilla
Oct 13, 2026 CVE-2026-109741 Medium 5.4 Use-after-free in the Storage: Bucket File System component Assigned by mozilla
Oct 13, 2026 CVE-2026-109742 Medium 4.3 Information disclosure in the PDF Viewer component Assigned by mozilla
Oct 13, 2026 CVE-2026-109743 High 8.8 Privilege escalation in the Panning and Zooming component Assigned by mozilla
Oct 13, 2026 CVE-2026-109744 High 8.1 Other issue in the DOM: File component Assigned by mozilla
Oct 13, 2026 CVE-2026-109745 Critical 9.6 Sandbox escape due to uninitialized memory in the DOM: Web Serial component Assigned by mozilla
Oct 13, 2026 CVE-2026-109746 High 7.3 Mitigation bypass in the DOM: Security component Assigned by mozilla
Oct 13, 2026 CVE-2026-109747 High 7.3 Other issue in the Address Bar component Assigned by mozilla
Oct 13, 2026 CVE-2026-109748 Medium 5.4 Use-after-free in the JavaScript: WebAssembly component Assigned by mozilla
Oct 13, 2026 CVE-2026-109749 Medium 5.4 Use-after-free in the JavaScript: WebAssembly component Assigned by mozilla
Oct 13, 2026 CVE-2026-109750 Not yet scored Site isolation issue in the DOM: Web Authentication component Assigned by mozilla
Oct 13, 2026 CVE-2026-109751 Medium 4.3 Information disclosure in the Networking component Assigned by mozilla
Oct 13, 2026 CVE-2026-109752 Medium 5.4 Use-after-free in the DOM: Workers component Assigned by mozilla
Oct 13, 2026 CVE-2026-109754 High 8.1 Incorrect boundary conditions in the DOM: Editor component Assigned by mozilla
Oct 13, 2026 CVE-2026-109755 Critical 9.6 Sandbox escape in the DOM: Content Processes component Assigned by mozilla
Oct 13, 2026 CVE-2026-109756 High 8.8 Privilege escalation in the DOM: Navigation component Assigned by mozilla
Oct 13, 2026 CVE-2026-109757 High 8.3 Sandbox escape due to race condition in the Networking component Assigned by mozilla
Oct 13, 2026
Previous Page 14 of 15 Next CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
