Export limit exceeded: 369524 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 369524 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (369524 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-16379 | 1 Mozilla | 1 Firefox | 2026-07-22 | 9.8 Critical |
| Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13. | ||||
| CVE-2026-62466 | 1 Oracle | 1 Human Resources | 2026-07-22 | 7.2 High |
| Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks of this vulnerability can result in takeover of Oracle Human Resources. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). | ||||
| CVE-2026-16358 | 1 Mozilla | 1 Firefox | 2026-07-22 | 9.8 Critical |
| Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13. | ||||
| CVE-2026-16380 | 1 Mozilla | 1 Firefox | 2026-07-22 | 9.1 Critical |
| Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153. | ||||
| CVE-2026-16381 | 1 Mozilla | 1 Firefox | 2026-07-22 | 9.1 Critical |
| Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13. | ||||
| CVE-2026-16382 | 1 Mozilla | 1 Firefox | 2026-07-22 | 9.8 Critical |
| Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153. | ||||
| CVE-2026-16157 | 2026-07-22 | N/A | ||
| Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectories. Installing the software outside of the Program Files directory, or on a custom path, creates a LocalSystem service running from a directory that any standard local user can write to. A standard local user can overwrite any DLL in the service directory. On service restart, the OS loads the attacker's DLL before any managed code runs, executing arbitrary code as SYSTEM. | ||||
| CVE-2026-16384 | 1 Mozilla | 1 Firefox | 2026-07-22 | 7.5 High |
| Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153. | ||||
| CVE-2026-16385 | 1 Mozilla | 1 Firefox | 2026-07-22 | 7.5 High |
| Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153. | ||||
| CVE-2026-16386 | 1 Mozilla | 1 Firefox | 2026-07-22 | 7.5 High |
| Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153. | ||||
| CVE-2026-16387 | 1 Mozilla | 1 Firefox | 2026-07-22 | 9.8 Critical |
| Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13. | ||||
| CVE-2023-52355 | 2 Libtiff, Redhat | 5 Libtiff, Ai Inference Server, Discovery and 2 more | 2026-07-22 | 7.5 High |
| An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB. | ||||
| CVE-2026-16388 | 1 Mozilla | 1 Firefox | 2026-07-22 | 9.8 Critical |
| Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153. | ||||
| CVE-2026-16389 | 1 Mozilla | 1 Firefox | 2026-07-22 | 9.8 Critical |
| Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153. | ||||
| CVE-2026-16390 | 1 Mozilla | 1 Firefox | 2026-07-22 | 9.1 Critical |
| Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13. | ||||
| CVE-2026-16391 | 1 Mozilla | 1 Firefox | 2026-07-22 | 7.5 High |
| Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153 and Firefox ESR 140.13. | ||||
| CVE-2026-16393 | 1 Mozilla | 1 Firefox | 2026-07-22 | 9.1 Critical |
| Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153. | ||||
| CVE-2026-16398 | 1 Mozilla | 1 Firefox | 2026-07-22 | 7.5 High |
| Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153. | ||||
| CVE-2026-16399 | 2026-07-22 | 7.5 High | ||
| Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153. | ||||
| CVE-2026-16400 | 1 Mozilla | 1 Firefox | 2026-07-22 | 7.5 High |
| Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153. | ||||