Export limit exceeded: 393117 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ',' (at char 44), (line:1, col:45)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (393117 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-85184 1 Fastify 2 Fastify/middie, Fastify\/middie 2026-09-15 9.1 Critical
@fastify/middie versions >= 9.1.0 and before 9.3.4 decide whether to run path-scoped middleware by matching against the raw request target, while the Fastify router resolves an absolute-form request target to its path before dispatching. Because the two layers evaluate different strings, a request using an absolute-form target reaches the route handler while the path-scoped middleware, such as authentication or authorization, is skipped. An unauthenticated network attacker can use this to bypass path-based access controls in a Fastify application that relies on middie for those controls. Users should upgrade to @fastify/middie 9.3.4 or later.
CVE-2026-92076 1 Mozilla 1 Firefox 2026-09-15 N/A
Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92073 1 Mozilla 1 Firefox 2026-09-15 8.8 High
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92071 1 Mozilla 1 Firefox 2026-09-15 N/A
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92062 1 Mozilla 1 Firefox 2026-09-15 8.8 High
Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92060 1 Mozilla 1 Firefox 2026-09-15 N/A
Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92055 1 Mozilla 1 Firefox 2026-09-15 8.8 High
Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92054 1 Mozilla 1 Firefox 2026-09-15 8.8 High
Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92053 1 Mozilla 1 Firefox 2026-09-15 8.8 High
Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92052 1 Mozilla 1 Firefox 2026-09-15 8.8 High
Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92048 1 Mozilla 1 Firefox 2026-09-15 N/A
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92047 1 Mozilla 1 Firefox 2026-09-15 8.8 High
Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92046 1 Mozilla 1 Firefox 2026-09-15 N/A
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92043 1 Mozilla 1 Firefox 2026-09-15 8.8 High
Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92042 1 Mozilla 1 Firefox 2026-09-15 N/A
Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92041 1 Mozilla 1 Firefox 2026-09-15 N/A
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92037 1 Mozilla 1 Firefox 2026-09-15 N/A
Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92036 1 Mozilla 1 Firefox 2026-09-15 N/A
Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.
CVE-2026-92035 1 Mozilla 1 Firefox 2026-09-15 N/A
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.
CVE-2026-92030 1 Mozilla 1 Firefox 2026-09-15 N/A
Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16.