CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A command injection vulnerability in dracut. A remote attacker on the adjacent network can provide crafted DHCP options, leading to code execution in initramfs during system boot.
Invalid pointer vulnerability in the Security: PSM component of Firefox and Thunderbird. Fixed in Firefox 153 and Thunderbird 153.
Information disclosure vulnerability in the Networking: WebSockets component in Firefox and Thunderbird. Fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.
Privilege escalation vulnerability in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Information disclosure vulnerability in the DOM: Security component in Firefox and Thunderbird. Fixed in Firefox 153 and Thunderbird 153.
Site isolation issue in the DOM: Navigation component in Firefox and Thunderbird. Fixed in version 153.
Site isolation issue in the Graphics component in Firefox and Thunderbird. Fixed in version 153.
Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Information disclosure vulnerability in the Storage: IndexedDB component. This flaw was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Information disclosure vulnerability due to uninitialized memory in the Graphics: WebGPU component. This flaw was fixed in Firefox 153 and Thunderbird 153.
Information disclosure vulnerability due to uninitialized memory in the Graphics: WebGPU component. This flaw was fixed in Firefox 153 and Thunderbird 153.
Information disclosure vulnerability due to uninitialized memory in the Graphics: WebGPU component. This flaw was fixed in Firefox 153 and Thunderbird 153.
Vulnerability in Firefox and Thunderbird (DOM: Content Processes component) allows privilege escalation. Fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Denial-of-service vulnerability in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Information disclosure vulnerability in the Framework component in DevTools. This flaw was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Vulnerability in the Privacy component in Firefox for Android. The flaw leads to information disclosure. The issue was fixed in Firefox 153.
Vulnerability in the DOM: Content Processes component in Firefox and Thunderbird allows privilege escalation. Fixed in version 153.
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, Thunderbird 140.13, Firefox ESR 140.15, and Thunderbird 140.15.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS