Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Produkt nieustalony | CVE-2026-117877 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,3 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117878 Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117879 Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
7,3 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117880 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117881 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117882 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117883 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117884 Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117885 Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,3 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117886 Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117875 Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,3 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117876 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117866 Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
7,3 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117867 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
7,3 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117868 Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
9,6 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117869 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117870 Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
7,3 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117871 Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
7,3 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117872 Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117873 Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117874 Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
6,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| electrum | CVE-2026-117602 Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature. A rogue local process with write access to the Electrum… |
8,6 | 0,11 % | Brak wpisu w KEV nie wyklucza ataków | |
| electrum | CVE-2026-117603 Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows malicious NWC clients to exceed daily_limit_sat by exploiting non-atomic budget checks and millisatoshi truncation. Attackers can send concurrent pay_invoice requests that pass… |
9,3 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117860 Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
8,1 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Produkt nieustalony | CVE-2026-117861 Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. |
9,6 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 14.11.2026, 23:02 UTC – 15.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.