CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 16:40 UTC )
This week: 5,345 CVEs published, 351 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,345 Show in the list Critical, last 7 days 351 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product mozilla:firefox . Show all products
CVE Severity Title Published CVE-2026-16409 High 7.5 Invalid pointer in the Security: PSM component. Jul 21, 2026 CVE-2026-16410 Critical 9.8 JIT miscompilation in the JavaScript Engine: JIT component. Jul 21, 2026 CVE-2026-16411 Critical 9.8 Memory safety bugs present in Firefox 152. Jul 21, 2026 CVE-2026-16412 Critical 9.8 Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Jul 21, 2026 CVE-2026-18809 Medium 6.5 Information disclosure in Firefox for Android and Firefox Focus for Android Assigned by mozilla
Aug 4, 2026 CVE-2026-74934 High 7.5 Site isolation issue in the Graphics: CanvasWebGL component Assigned by mozilla
Aug 18, 2026 CVE-2026-74935 High 8.8 Privilege escalation in the DOM: Networking component Assigned by mozilla
Aug 18, 2026 CVE-2026-74936 Critical 9.8 Use-after-free in the JavaScript: WebAssembly component Assigned by mozilla
Aug 18, 2026 CVE-2026-74939 High 8.8 Privilege escalation in the DOM: Navigation component Assigned by mozilla
Aug 18, 2026 CVE-2026-74940 Critical 9.8 Use-after-free in the Graphics: Text component Assigned by mozilla
Aug 18, 2026 CVE-2026-74941 High 8.8 Privilege escalation in the Graphics: CanvasWebGL component Assigned by mozilla
Aug 18, 2026 CVE-2026-74942 High 8.8 Privilege escalation in the Remote Settings Client component Assigned by mozilla
Aug 18, 2026 CVE-2026-74943 Critical 9.8 Use-after-free in the Graphics: ImageLib component Assigned by mozilla
Aug 18, 2026 CVE-2026-74944 Critical 9.8 Use-after-free in the DOM: Core & HTML component Assigned by mozilla
Aug 18, 2026 CVE-2026-74945 Medium 6.5 Information disclosure in the Graphics: Text component Assigned by mozilla
Aug 18, 2026 CVE-2026-74946 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component Assigned by mozilla
Aug 18, 2026 CVE-2026-74948 Medium 6.5 Information disclosure in the Graphics component Assigned by mozilla
Aug 18, 2026 CVE-2026-74949 High 8.8 Privilege escalation due to use-after-free in the Graphics: Canvas2D component Assigned by mozilla
Aug 18, 2026 CVE-2026-74953 High 8.8 Privilege escalation in the Networking: Cookies component Assigned by mozilla
Aug 18, 2026 CVE-2026-74957 High 8.1 Mitigation bypass in the Safe Browsing component Assigned by mozilla
Aug 18, 2026 CVE-2026-74959 Critical 9.1 Mitigation bypass in the Storage: Cache API component Assigned by mozilla
Aug 18, 2026 CVE-2026-74960 High 8.1 Site isolation issue in the WebExtensions component Assigned by mozilla
Aug 18, 2026 CVE-2026-74962 High 8.1 Site isolation issue in the Networking: Cookies component Assigned by mozilla
Aug 18, 2026 CVE-2026-74963 Medium 5.4 Same-origin policy bypass in the Networking: Cookies component Assigned by mozilla
Aug 18, 2026 CVE-2026-74964 Critical 9.8 Integer overflow in the Graphics component Assigned by mozilla
Aug 18, 2026 CVE-2026-74965 High 8.8 Privilege escalation in the Shell Integration component Assigned by mozilla
Aug 18, 2026 CVE-2026-74967 Medium 5.4 Same-origin policy bypass in the Audio/Video: Playback component Assigned by mozilla
Aug 18, 2026 CVE-2026-74969 High 8.8 Use-after-free in the Layout: Text and Fonts component Assigned by mozilla
Aug 18, 2026 CVE-2026-74971 Medium 4.3 Information disclosure in the DOM: UI Events & Focus Handling component Assigned by mozilla
Aug 18, 2026 CVE-2026-74972 Medium 4.3 Information disclosure in the DOM: Push Subscriptions component Assigned by mozilla
Aug 18, 2026 CVE-2026-74973 Medium 4.2 Race condition, use-after-free in the Graphics component Assigned by mozilla
Aug 18, 2026 CVE-2026-74974 Medium 5.4 Same-origin policy bypass in the Graphics: ImageLib component Assigned by mozilla
Aug 18, 2026 CVE-2026-74976 Medium 6.5 JIT miscompilation in the JavaScript Engine: JIT component Assigned by mozilla
Aug 18, 2026 CVE-2026-74983 High 8.1 Mitigation bypass in the Data Loss Prevention component Assigned by mozilla
Aug 18, 2026 CVE-2026-74987 Critical 9.8 Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154 Assigned by mozilla
Aug 18, 2026 CVE-2026-74990 Critical 9.8 Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154 Assigned by mozilla
Aug 18, 2026 CVE-2026-75874 Critical 10.0 Sandbox escape in the Remote Settings Client component Assigned by mozilla
Aug 18, 2026 CVE-2026-74937 High 8.8 Use-after-free in the JavaScript: GC component Assigned by mozilla
Aug 18, 2026 CVE-2026-74938 Critical 9.1 Mitigation bypass in the JavaScript: GC component Assigned by mozilla
Aug 18, 2026 CVE-2026-74947 High 8.8 Privilege escalation due to invalid pointer in the Graphics component Assigned by mozilla
Aug 18, 2026 CVE-2026-74950 High 8.8 Privilege escalation in the Downloads API component Assigned by mozilla
Aug 18, 2026 CVE-2026-74951 Medium 6.5 Clickjacking issue in Firefox for Android Assigned by mozilla
Aug 18, 2026 CVE-2026-74952 High 8.8 Privilege escalation in the Application Update component Assigned by mozilla
Aug 18, 2026 CVE-2026-74954 High 7.5 Information disclosure due to side-channel in the Storage: Cache API component Assigned by mozilla
Aug 18, 2026 CVE-2026-74955 High 8.8 Privilege escalation in the Request Handling component Assigned by mozilla
Aug 18, 2026 CVE-2026-74956 Critical 9.1 Same-origin policy bypass in the DOM: Service Workers component Assigned by mozilla
Aug 18, 2026 CVE-2026-74958 High 7.5 Information disclosure in the WebRTC component Assigned by mozilla
Aug 18, 2026 CVE-2026-74961 Critical 9.1 Side-channel in the Web Audio component Assigned by mozilla
Aug 18, 2026 CVE-2026-74966 High 7.5 Information disclosure in the Form Autofill component Assigned by mozilla
Aug 18, 2026 CVE-2026-74968 Medium 5.4 Site isolation issue in the Graphics: WebRender component Assigned by mozilla
Aug 18, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
