CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-124952 json | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45. | |
| CVE-2026-124951 json | Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.... | |
| CVE-2026-124950 json | Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124949 json | Other issue in the SVG component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124948 json | Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Fire... | |
| CVE-2026-124947 json | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124946 json | Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124945 json | Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124944 json | Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124943 json | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124942 json | Invalid pointer in the DOM: Streams component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124941 json | Information disclosure in the Security: RLBox component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124940 json | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124939 json | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7... | |
| CVE-2026-124938 json | Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124937 json | Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124936 json | Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124935 json | Undefined behavior in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124934 json | Spoofing issue in the Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124933 json | Sandbox escape in the Console component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124932 json | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124931 json | Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.... | |
| CVE-2026-124930 json | Information disclosure in the Address Bar component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124929 json | Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160 and Firefox ESR 15... | |
| CVE-2026-124928 json | Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124927 json | Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124926 json | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124925 json | Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124924 json | Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox E... | |
| CVE-2026-124923 json | Sandbox escape in the Agent component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124922 json | Use-after-free in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 160 and Firefox ESR 1... | |
| CVE-2026-124921 json | Sandbox escape in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124920 json | Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124919 json | Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 a... | |
| CVE-2026-124918 json | Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed ... | |
| CVE-2026-124917 json | Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160 and Firefox ES... | |
| CVE-2026-124915 json | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Firefox ESR ... | |
| CVE-2026-124914 json | Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124913 json | Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124912 json | Spoofing issue in the DOM: Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124911 json | Clickjacking issue in the Autofill component in Firefox for Android. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124910 json | Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124909 json | Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124908 json | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124907 json | Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fix... | |
| CVE-2026-124906 json | Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124905 json | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox... | |
| CVE-2026-124904 json | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124903 json | Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, a... | |
| CVE-2026-124902 json | Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Fi... | |
| CVE-2026-124901 json | Other issue in the Networking: JAR component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ES... | |
| CVE-2026-124900 json | Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124899 json | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and ... | |
| CVE-2026-124898 json | Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR... | |
| CVE-2026-124897 json | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124896 json | Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124895 json | Use-after-free in the Storage: localStorage & sessionStorage component. This vulnerability was fixed in Firefox 160, Firefox ... | |
| CVE-2026-124894 json | Use-after-free in the Networking: Cookies component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124893 json | Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124892 json | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124891 json | Incorrect boundary conditions in the DOM: Selection component. This vulnerability was fixed in Firefox 160 and Firefox ESR 15... | |
| CVE-2026-124890 json | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefo... | |
| CVE-2026-124889 json | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.... | |
| CVE-2026-124888 json | Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefo... | |
| CVE-2026-124887 json | Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefo... | |
| CVE-2026-124886 json | Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124885 json | Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ... | |
| CVE-2026-124884 json | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124883 json | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124882 json | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45,... | |
| CVE-2026-124881 json | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45,... | |
| CVE-2026-124880 json | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefo... | |
| CVE-2026-124879 json | Invalid pointer in the Networking: Cache component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124878 json | Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124877 json | Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Fire... | |
| CVE-2026-124876 json | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45,... | |
| CVE-2026-124875 json | Incorrect boundary conditions in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 160, Firefox ES... | |
| CVE-2026-124874 json | Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45,... | |
| CVE-2026-124873 json | Invalid pointer in the DOM: Editor component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124872 json | Use-after-free in the Cycle Collector component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox... | |
| CVE-2026-124871 json | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124870 json | Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 15... | |
| CVE-2026-124869 json | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124868 json | Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR ... | |
| CVE-2026-124867 json | Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124866 json | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124865 json | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR... | |
| CVE-2026-124864 json | Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Fire... | |
| CVE-2026-124863 json | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefo... | |
| CVE-2026-124862 json | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124861 json | Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefo... | |
| CVE-2026-124860 json | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR... | |
| CVE-2026-124859 json | Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in Fire... | |
| CVE-2026-124858 json | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefo... | |
| CVE-2026-124857 json | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Fire... | |
| CVE-2026-124856 json | Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 160 and Firefox ESR ... | |
| CVE-2026-124855 json | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124854 json | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124853 json | Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox ... | |
| CVE-2026-124852 json | Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160. |