CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Mitigation bypass in the File Handling component. Fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the JavaScript: WebAssembly component of Firefox and Thunderbird. The flaw was fixed in Firefox 158 and Thunderbird 158.
Use-after-free vulnerability in the DOM: Workers component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Information disclosure vulnerability in the Networking component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the JavaScript: WebAssembly component of Firefox and Thunderbird. The flaw was fixed in Firefox 158 and Thunderbird 158.
Use-after-free vulnerability in the JavaScript: WebAssembly component of Firefox and Thunderbird. The flaw was fixed in Firefox 158 and Thunderbird 158.
Information disclosure vulnerability in the PDF Viewer component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the Storage: Bucket File System component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the Audio/Video: Playback component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the DOM: Animation component of Firefox and Thunderbird. Fixed in version 158.
Use-after-free vulnerability in the DOM: Streams component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Incorrect boundary conditions in the Graphics: Canvas2D component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the JavaScript Engine: JIT component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the DOM: Animation component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the Audio/Video component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the SVG component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the DOM: Core & HTML component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the DOM: Core & HTML component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Integer overflow in the Layout: Text and Fonts component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Incorrect boundary conditions in the JavaScript Engine: JIT component. The vulnerability was fixed in Firefox 158, Firefox ESR 153.5, and Thunderbird 158 and 153.5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS