CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Invalid pointer in the JavaScript Engine component of Firefox and Thunderbird. The vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free in the JavaScript: GC component of Firefox and Thunderbird. It was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free in the Graphics: ImageLib component of Firefox and Thunderbird. It was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free in the Networking component of Firefox and Thunderbird. It was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free in the CSS Parsing and Computation component of Firefox and Thunderbird. It was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the Audio/Video: Playback component of Firefox and Thunderbird. It may lead to undefined memory behavior during media playback. The issue was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the JavaScript: GC component of Firefox and Thunderbird. It may cause memory errors during JavaScript garbage collection. The issue was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the Audio/Video component of Firefox and Thunderbird. It may lead to memory errors while processing audio and video content. The issue was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the Layout: Text and Fonts component of Firefox and Thunderbird. It may cause memory errors while rendering text and fonts. The issue was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the DOM: Core & HTML component of Firefox and Thunderbird. It may lead to memory errors while processing HTML documents and DOM manipulation. The issue was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the DOM: Editor component of Firefox and Thunderbird. It may cause memory errors while editing content in the browser. The issue was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the Networking: HTTP component of Firefox and Thunderbird. It may lead to memory errors while handling HTTP connections. The issue was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the JavaScript Engine: JIT component of Firefox and Thunderbird. It may cause memory errors during JIT compilation of JavaScript code. The issue was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Incorrect boundary conditions vulnerability in the Layout: Tables component of Firefox and Thunderbird. It may lead to errors while rendering tables. The issue was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the DOM: Core & HTML component of Firefox and Thunderbird. It may lead to memory errors while processing HTML documents and DOM manipulation. The issue was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the DOM: Core & HTML component of Firefox and Thunderbird. It may lead to undefined behavior or potential code execution. Fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Incorrect boundary conditions in the WebRTC: Signaling component of Firefox and Thunderbird. It may cause errors or potential security impacts when processing WebRTC signaling. Fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Incorrect boundary conditions in the Security: PSM component of Firefox and Thunderbird. It may lead to errors in connection security handling. Fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the WebRTC: Networking component of Firefox and Thunderbird enabling privilege escalation. Fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Use-after-free vulnerability in the JavaScript Engine: JIT component of Firefox and Thunderbird. It may lead to code execution or application crashes. Fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS