CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Integer overflow in the Audio/Video component in Firefox and Thunderbird. Fixed in versions 153.
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
A JIT miscompilation vulnerability exists in the JavaScript Engine component of Firefox and Thunderbird. It was fixed in version 153 of both products.
Mitigation bypass in the Enterprise Policies component in Firefox and Thunderbird. Fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Vulnerability in the Libraries component in NSS due to incorrect boundary conditions and integer overflow. Fixed in Firefox 153 and Thunderbird 153.
Sandbox escape vulnerability in the DOM: Networking component. Fixed in Firefox 153 and Thunderbird 153.
Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
A vulnerability in the DOM: Networking component in Firefox and Thunderbird allows bypassing security mitigations. This was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
A vulnerability in the DOM: Service Workers component in Firefox and Thunderbird allows bypassing security mitigations. This was fixed in Firefox 153 and Thunderbird 153.
Same-origin policy bypass in the DNS networking component of Firefox. This issue was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Mitigation bypass in the Networking component in Firefox and Thunderbird. Fixed in Firefox 153 and Thunderbird 153.
A vulnerability in the PDF Viewer component in Firefox and Thunderbird allows bypassing security mitigations. This was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Site isolation vulnerability in the HTTP networking component of Firefox. This issue was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Mitigation bypass in the DOM: Networking component in Firefox and Thunderbird. Fixed in Firefox 153 and Thunderbird 153.
Integer overflow in the JavaScript: WebAssembly component. Fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Incorrect boundary conditions in the JavaScript: WebAssembly component. Fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Sandbox escape vulnerability due to invalid pointer in the Disability Access APIs component. Fixed in Firefox 153 and Thunderbird 153.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS