CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 13:23 UTC )
This week: 5,477 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,477 Show in the list Critical, last 7 days 360 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product mozilla:thunderbird . Show all products
CVE Severity Title Published CVE-2026-100764 High 8.8 Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component Assigned by mozilla
Sep 29, 2026 CVE-2026-100763 Critical 9.1 Incorrect boundary conditions in the Graphics: WebGPU component Assigned by mozilla
Sep 29, 2026 CVE-2026-100762 Critical 9.6 Sandbox escape due to use-after-free in the DOM: Content Processes component Assigned by mozilla
Sep 29, 2026 CVE-2026-100761 High 8.8 Privilege escalation due to use-after-free in the Graphics: WebGPU component Assigned by mozilla
Sep 29, 2026 CVE-2026-100760 Critical 9.6 Sandbox escape in the Security: Process Sandboxing component Assigned by mozilla
Sep 29, 2026 CVE-2026-100759 High 8.1 Uninitialized memory in the Storage: Quota Manager component Assigned by mozilla
Sep 29, 2026 CVE-2026-100758 Critical 9.6 Sandbox escape in the DOM: Navigation component Assigned by mozilla
Sep 29, 2026 CVE-2026-100757 High 8.8 Use-after-free in the Widget component Assigned by mozilla
Sep 29, 2026 CVE-2026-100756 High 8.1 Incorrect boundary conditions in the Audio/Video: Playback component Assigned by mozilla
Sep 29, 2026 CVE-2026-92240 Critical 9.1 Out-of-bounds read in IMAP response parser Assigned by mozilla
Sep 15, 2026 CVE-2026-92239 High 8.1 Buffer overrun in IMAP Assigned by mozilla
Sep 15, 2026 CVE-2026-92238 Critical 9.8 Ambiguous parsing of mail headers Assigned by mozilla
Sep 15, 2026 CVE-2026-92079 Critical 9.1 Mitigation bypass in the Widget: Win32 component Assigned by mozilla
Sep 15, 2026 CVE-2026-92078 Medium 6.5 Denial-of-service in the Security component Assigned by mozilla
Sep 15, 2026 CVE-2026-92077 Medium 6.5 Denial-of-service in the SVG component Assigned by mozilla
Sep 15, 2026 CVE-2026-92076 High 8.8 Incorrect boundary conditions in the Networking component Assigned by mozilla
Sep 15, 2026 CVE-2026-92075 Critical 9.1 Mitigation bypass in the Networking component Assigned by mozilla
Sep 15, 2026 CVE-2026-92074 High 8.8 Mitigation bypass in the Popup Blocker component Assigned by mozilla
Sep 15, 2026 CVE-2026-92073 High 8.8 Privilege escalation in the Enterprise Policies component Assigned by mozilla
Sep 15, 2026 CVE-2026-92072 High 8.0 Incorrect boundary conditions in the Safe Browsing component Assigned by mozilla
Sep 15, 2026 CVE-2026-92071 Critical 9.6 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Assigned by mozilla
Sep 15, 2026 CVE-2026-92070 Medium 4.3 Information disclosure in the Networking component Assigned by mozilla
Sep 15, 2026 CVE-2026-92069 Medium 5.4 Spoofing issue in the DOM: Navigation component Assigned by mozilla
Sep 15, 2026 CVE-2026-92068 Medium 5.4 Site isolation issue in the Reader Mode component Assigned by mozilla
Sep 15, 2026 CVE-2026-92067 High 8.8 Use-after-free in the Widget: Gtk component Assigned by mozilla
Sep 15, 2026 CVE-2026-92066 Critical 9.8 Sandbox escape in the Profile Backup component Assigned by mozilla
Sep 15, 2026 CVE-2026-92065 High 8.8 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Assigned by mozilla
Sep 15, 2026 CVE-2026-92064 High 8.8 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Assigned by mozilla
Sep 15, 2026 CVE-2026-92063 Medium 6.5 Denial-of-service in the Audio/Video component Assigned by mozilla
Sep 15, 2026 CVE-2026-92062 High 8.8 Privilege escalation in the Session Restore component Assigned by mozilla
Sep 15, 2026 CVE-2026-92061 Critical 9.8 Incorrect boundary conditions in the Security: Process Sandboxing component Assigned by mozilla
Sep 15, 2026 CVE-2026-92060 High 8.8 Use-after-free in the Internationalization component Assigned by mozilla
Sep 15, 2026 CVE-2026-92059 Critical 9.3 Incorrect boundary conditions in the DOM: Editor component Assigned by mozilla
Sep 15, 2026 CVE-2026-92058 High 8.8 Use-after-free in the Graphics component Assigned by mozilla
Sep 15, 2026 CVE-2026-92057 Critical 9.1 Mitigation bypass in the Enterprise Policies component Assigned by mozilla
Sep 15, 2026 CVE-2026-92056 High 8.8 Use-after-free in the Graphics: Text component Assigned by mozilla
Sep 15, 2026 CVE-2026-92055 High 8.8 Privilege escalation in the DevTools component Assigned by mozilla
Sep 15, 2026 CVE-2026-92054 High 8.8 Privilege escalation in the Memory component Assigned by mozilla
Sep 15, 2026 CVE-2026-92053 High 8.8 Privilege escalation in the Graphics: CanvasWebGL component Assigned by mozilla
Sep 15, 2026 CVE-2026-92052 High 8.8 Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component Assigned by mozilla
Sep 15, 2026 CVE-2026-92051 Critical 9.1 Spoofing issue due to invalid pointer in the Graphics component Assigned by mozilla
Sep 15, 2026 CVE-2026-92050 Critical 9.1 Sandbox escape due to race condition in the XPConnect component Assigned by mozilla
Sep 15, 2026 CVE-2026-92049 High 8.8 Use-after-free in the Widget: Win32 component Assigned by mozilla
Sep 15, 2026 CVE-2026-92048 Critical 9.0 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component Assigned by mozilla
Sep 15, 2026 CVE-2026-92047 High 8.8 Privilege escalation in the Crash Reporting component Assigned by mozilla
Sep 15, 2026 CVE-2026-92046 High 8.8 Use-after-free in the Graphics component Assigned by mozilla
Sep 15, 2026 CVE-2026-92045 Critical 9.6 Sandbox escape due to incorrect boundary conditions in the WebRTC component Assigned by mozilla
Sep 15, 2026 CVE-2026-92044 High 7.5 Information disclosure in the Networking: HTTP component Assigned by mozilla
Sep 15, 2026 CVE-2026-92043 High 8.8 Privilege escalation due to incorrect boundary conditions in the Audio/Video component Assigned by mozilla
Sep 15, 2026 CVE-2026-92042 High 7.5 Race condition in the DOM: Content Processes component Assigned by mozilla
Sep 15, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
