CVE.report
CVE.report is the most up-to-date database of common vulnerabilities and exposures. Information is pulled in from several sources and processed in to a mobile friendly, easy to use page. Use the site to quickly check for vulnerabilities in products such as operating systems, applications, hardware, networks, databases, browsers, e-mail clients and more.
CVEs provide a unique and common naming scheme for publicly known cyber security vulnerabilities in order to quickly identify and share these vulnerabilities. You can use the search below to look for vulnerabilities based on product, vendor, or common tags
The form you will see after following this link allows you to fill out the various variables in the CVSS scoring system and receive the corresponding score. The description of each of the variables is also included for additional information.
cve.report now provides a free read-only JSON API for CVE details. Each record combines the CVE Program JSON record, NVD enrichment, KEV, and EPSS when available.
Recent CVEs
| CVE | Description | Updated |
|---|---|---|
| CVE-2026-121190 json | UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engine... | |
| CVE-2026-121175 json | Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation ... | |
| CVE-2026-91607 json | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server... | |
| CVE-2026-91600 json | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Visual Analyzer)... | |
| CVE-2026-91598 json | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Majel Mobile Ser... | |
| CVE-2026-91597 json | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Securit... | |
| CVE-2026-91349 json | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SD... | |
| CVE-2026-87263 json | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server... | |
| CVE-2026-83283 json | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Securit... | |
| CVE-2026-124952 json | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45. | |
| CVE-2026-124948 json | Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Fire... | |
| CVE-2026-124947 json | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124944 json | Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124943 json | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124941 json | Information disclosure in the Security: RLBox component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124932 json | Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124930 json | Information disclosure in the Address Bar component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124929 json | Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160 and Firefox ESR 15... | |
| CVE-2026-124926 json | Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-123082 json | Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to applica... | |
| CVE-2026-121885 json | A flaw was found in Podman. An attacker can trigger a Denial of Service (DoS) by supplying a container image containing craft... | |
| CVE-2026-114359 json | Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives. A m... | |
| CVE-2026-113422 json | In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web UI, and the Wire Service RE... | |
| CVE-2026-111264 json | The security constraint generated for EJB JAX-WS endpoints with configured authentication protects only some HTTP methods. A ... | |
| CVE-2026-111263 json | Authentication configured for an EJB JAX-WS endpoint in the TomEE deployment descriptor is not enforced when the endpoint is ... | |
| CVE-2026-111262 json | The Jakarta Security LDAP identity store does not neutralize special characters in the caller name before using it in directo... | |
| CVE-2026-87756 json | The internal system EJBs used for remote deployment and configuration did not enforce their administrative role check when th... | |
| CVE-2026-87755 json | Stateful session bean identifiers are not generated from a cryptographically secure random source. A remote attacker with acc... | |
| CVE-2026-86811 json | The stateful session bean passivation mechanism derives the on-disk file name from a client-supplied identifier without valid... | |
| CVE-2026-86532 json | The bundled JAAS login modules leak whether a username exists and compare credentials in a non-constant-time manner. A remote... | |
| CVE-2026-124925 json | Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124924 json | Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox E... | |
| CVE-2026-124922 json | Use-after-free in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 160 and Firefox ESR 1... | |
| CVE-2026-124919 json | Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 a... | |
| CVE-2026-124918 json | Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed ... | |
| CVE-2026-124917 json | Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160 and Firefox ES... | |
| CVE-2026-124915 json | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 160 and Firefox ESR ... | |
| CVE-2026-124909 json | Information disclosure in the Private Browsing component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124908 json | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124907 json | Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fix... | |
| CVE-2026-124906 json | Use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124904 json | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124903 json | Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, a... | |
| CVE-2026-124900 json | Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124899 json | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and ... | |
| CVE-2026-124898 json | Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR... | |
| CVE-2026-124897 json | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124895 json | Use-after-free in the Storage: localStorage & sessionStorage component. This vulnerability was fixed in Firefox 160, Firefox ... | |
| CVE-2026-124894 json | Use-after-free in the Networking: Cookies component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124893 json | Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124892 json | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124891 json | Incorrect boundary conditions in the DOM: Selection component. This vulnerability was fixed in Firefox 160 and Firefox ESR 15... | |
| CVE-2026-124890 json | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefo... | |
| CVE-2026-124889 json | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.... | |
| CVE-2026-124888 json | Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefo... | |
| CVE-2026-124887 json | Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefo... | |
| CVE-2026-124885 json | Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ... | |
| CVE-2026-124884 json | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124883 json | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124882 json | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45,... | |
| CVE-2026-124881 json | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45,... | |
| CVE-2026-124880 json | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefo... | |
| CVE-2026-124878 json | Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124877 json | Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Fire... | |
| CVE-2026-124876 json | Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45,... | |
| CVE-2026-124875 json | Incorrect boundary conditions in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 160, Firefox ES... | |
| CVE-2026-124872 json | Use-after-free in the Cycle Collector component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox... | |
| CVE-2026-124871 json | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124870 json | Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 160 and Firefox ESR 15... | |
| CVE-2026-124869 json | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124868 json | Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR ... | |
| CVE-2026-124867 json | Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-124866 json | Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124865 json | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR... | |
| CVE-2026-124864 json | Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160, Fire... | |
| CVE-2026-124863 json | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefo... | |
| CVE-2026-124862 json | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. | |
| CVE-2026-124861 json | Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefo... | |
| CVE-2026-124860 json | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR... | |
| CVE-2026-124859 json | Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in Fire... | |
| CVE-2026-124858 json | Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefo... | |
| CVE-2026-124857 json | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Fire... | |
| CVE-2026-124856 json | Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 160 and Firefox ESR ... | |
| CVE-2026-124853 json | Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox ... | |
| CVE-2026-124852 json | Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 160. | |
| CVE-2026-123792 json | The Symfony Yaml components Inline and Parser, parse some YAML documents inefficiently, so that a small crafted document c... | |
| CVE-2026-123746 json | The Symfony Security HTTP component AuthenticatorManager::authenticateUser() does not run the firewall user checker’s chec... | |
| CVE-2026-121623 json | The Symfony Serializer component DataUriNormalizer::denormalize() matches the data: scheme with a case-sensitive regular expr... | |
| CVE-2026-118786 json | Improper input validation in non-secure-callable (NSC) veneer functions of the NXP MCUXpresso SDK rpmsg-lite multicore exampl... | |
| CVE-2026-118785 json | Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples (trustzone_exa... | |
| CVE-2026-118514 json | In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\RequestMat... | |
| CVE-2026-111573 json | Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission ... | |
| CVE-2026-106143 json | Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-vue-editor) in Progress Software Kendo UI for Vue version... | |
| CVE-2026-87045 json | The HTTP/2 server in subsys/net/lib/http/http_server_http2.c clears the connection's stream binding at the start of every fra... | |
| CVE-2026-71397 json | Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated attacker... | |
| CVE-2026-66987 json | HCL AION is affected by a vulnerability where the account lockout mechanism did not sufficiently restrict repeated failed log... | |
| CVE-2026-66986 json | HCL AION is affected by a vulnerability where user sessions did not expire after a sufficient period of inactivity. An unatt... | |
| CVE-2026-66984 json | HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths. This ... | |
| CVE-2026-66981 json | HCL AION is affected by a vulnerability where the application trusted the value of the HTTP Host header supplied in requests ... | |
| CVE-2026-60042 json | An unauthenticated remote attacker can perform an authentication bypass on the com_check function, potentially triggering tra... |