Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (59 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-92033 1 Mozilla 2 Firefox, Firefox Mobile 2026-10-05 8.8 High
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156.
CVE-2026-86853 1 Mozilla 2 Firefox For Ios, Firefox Mobile 2026-10-05 4.3 Medium
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
CVE-2026-100823 1 Mozilla 2 Firefox, Firefox Mobile 2026-10-05 5.4 Medium
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157.
CVE-2026-84135 1 Mozilla 2 Firefox, Firefox Mobile 2026-09-03 9.8 Critical
Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-81267 1 Mozilla 2 Firefox For Ios, Firefox Mobile 2026-09-03 5.4 Medium
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.
CVE-2026-84117 1 Mozilla 2 Firefox, Firefox Mobile 2026-09-03 8.8 High
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-84127 1 Mozilla 2 Firefox, Firefox Mobile 2026-09-03 4.3 Medium
Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-74980 1 Mozilla 2 Firefox, Firefox Mobile 2026-08-25 6.5 Medium
Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2026-74975 1 Mozilla 2 Firefox, Firefox Mobile 2026-08-25 5.4 Medium
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
CVE-2023-49061 1 Mozilla 1 Firefox Mobile 2026-08-19 6.1 Medium
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.
CVE-2023-49060 1 Mozilla 1 Firefox Mobile 2026-08-19 9.8 Critical
An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.
CVE-2023-5758 1 Mozilla 1 Firefox Mobile 2026-08-19 6.1 Medium
When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack. This vulnerability affects Firefox for iOS < 119.
CVE-2022-31746 1 Mozilla 1 Firefox Mobile 2026-08-19 6.5 Medium
Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS < 102.
CVE-2020-26957 1 Mozilla 1 Firefox Mobile 2026-08-19 6.5 Medium
OneCRL was non-functional in the new Firefox for Android due to a missing service initialization. This could result in a failure to enforce some certificate revocations. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 83.
CVE-2020-26954 1 Mozilla 1 Firefox Mobile 2026-08-19 4.3 Medium
When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on targeted websites. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 83.
CVE-2022-26486 2 Mozilla, Redhat 7 Firefox, Firefox Focus, Firefox Mobile and 4 more 2026-08-19 9.6 Critical
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.
CVE-2023-29544 1 Mozilla 3 Firefox, Firefox Mobile, Focus 2026-08-19 6.5 Medium
If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
CVE-2023-29537 1 Mozilla 3 Firefox, Firefox Mobile, Focus 2026-08-19 7.5 High
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
CVE-2022-38474 1 Mozilla 1 Firefox Mobile 2026-08-19 4.3 Medium
A website that had permission to access the microphone could record audio without the audio notification being shown. This bug does not allow the attacker to bypass the permission prompt - it only affects the notification shown once permission has been granted.<br />*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 104.
CVE-2021-29993 1 Mozilla 1 Firefox Mobile 2026-08-19 8.1 High
Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 92.