CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in the DOM: Editor component is due to incorrect boundary conditions. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
A vulnerability in the Layout component is due to incorrect boundary conditions. It was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the DOM: Workers component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Information disclosure vulnerability in the Networking component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
A vulnerability in the DOM: Web Authentication component causes a site isolation issue. It was fixed in Firefox 158 and Thunderbird 158.
Use-after-free vulnerability in the JavaScript: WebAssembly component of Firefox and Thunderbird. The flaw was fixed in Firefox 158 and Thunderbird 158.
Use-after-free vulnerability in the JavaScript: WebAssembly component of Firefox and Thunderbird. The flaw was fixed in Firefox 158 and Thunderbird 158.
Other issue in the Address Bar component. It was fixed in Firefox 158 and Thunderbird 158.
Mitigation bypass in the DOM: Security component. It was fixed in Firefox 158 and Thunderbird 158.
Sandbox escape due to uninitialized memory in the DOM: Web Serial component. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Other issue in the DOM: File component. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Privilege escalation vulnerability in the Panning and Zooming component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Information disclosure vulnerability in the PDF Viewer component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the Storage: Bucket File System component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Privilege escalation vulnerability in the WebExtensions component. The flaw was fixed in Firefox 158 and Thunderbird 158.
Use-after-free vulnerability in the Audio/Video: Playback component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Mitigation bypass in the Enterprise Policies component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Frame poisoning vulnerability in the Layout component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Use-after-free vulnerability in the DOM: Animation component of Firefox and Thunderbird. Fixed in version 158.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS