Export limit exceeded: 110801 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (110801 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-118752 2 Danoli3, Freeimage Project 2 Freeimage, Freeimage 2026-11-05 7.8 High
FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.22 contain a heap buffer overflow vulnerability in the PBM RLE decoder of PluginIFF.cpp that lacks bounds checks on ByteRun1 runs. Attackers can supply a crafted IFF/LBM PBM file with runs straddling scanline ends to write up to 127 controlled bytes past the heap-allocated bitmap.
CVE-2026-118633 1 Sophos 1 Sg Utm 2026-11-05 8.1 High
A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is used with scanning enabled. Sophos UTM is end-of-life and the patch must be installed manually.
CVE-2026-118026 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118023 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118022 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118020 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118018 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159.
CVE-2026-118017 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118016 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118015 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118013 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118012 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118011 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118010 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118009 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118006 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118005 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118004 1 Mozilla 1 Firefox 2026-11-05 8.1 High
Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118003 1 Mozilla 1 Firefox 2026-11-05 8.1 High
Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117994 1 Mozilla 1 Firefox 2026-11-05 8.8 High
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.