Export limit exceeded: 424751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424751 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ',' (at char 12), (line:1, col:13)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (424751 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-124992 1 Nushell 1 Nushell 2026-11-10 3.3 Low
A vulnerability was identified in nushell up to 0.116.1. Impacted is the function escape_bytes of the file crates/nu-json/src/ser.rs of the component Data Conversion Handler. The manipulation leads to improper neutralization of escape, meta, or control sequences. The attack must be carried out locally. The pull request to fix this issue awaits acceptance.
CVE-2026-124950 2026-11-10 3.4 Low
Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124949 2026-11-10 3.4 Low
Other issue in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124947 2026-11-10 8.8 High
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124946 2026-11-10 3.4 Low
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124945 2026-11-10 3.4 Low
Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124944 2026-11-10 4.3 Medium
Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124943 2026-11-10 8.8 High
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124936 2026-11-10 3.4 Low
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124928 2026-11-10 6.1 Medium
Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124925 2026-11-10 4.3 Medium
Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124923 2026-11-10 6.1 Medium
Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124921 2026-11-10 6.1 Medium
Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124920 2026-11-10 6.1 Medium
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124908 2026-11-10 8.8 High
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124904 2026-11-10 8.8 High
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124900 2026-11-10 9.6 Critical
Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124878 2026-11-10 8.8 High
Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124871 2026-11-10 8.8 High
Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
CVE-2026-124867 2026-11-10 8.8 High
Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.