The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-124907: Mozilla Firefox: Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124906: Mozilla Firefox: Use-after-free in the Graphics: WebRender component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124905: Mozilla Firefox: Sandbox escape in the DOM: Navigation componentN/AN/AN/ANov 10, 2026
CVE-2026-124904: Mozilla Firefox: Use-after-free in the SVG component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124903: Mozilla Firefox: Sandbox escape due to use-after-free in the IPC component9.6 CriticalN/AN/ANov 10, 2026
CVE-2026-124902: Mozilla Firefox: Same-origin policy bypass due to race condition in the Audio/Video componentN/AN/AN/ANov 10, 2026
CVE-2026-124901: Mozilla Firefox: Other issue in the Networking: JAR componentN/AN/AN/ANov 10, 2026
CVE-2026-124900: Mozilla Firefox: Sandbox escape due to use-after-free in the DOM: Service Workers component9.6 CriticalN/AN/ANov 10, 2026
CVE-2026-124899: Mozilla Firefox: Use-after-free in the Layout: Text and Fonts component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124898: Mozilla Firefox: Use-after-free in the DOM: Editor component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124897: Mozilla Firefox: Use-after-free in the JavaScript: GC component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124896: Mozilla Firefox: Invalid pointer in the Layout: Text and Fonts componentN/AN/AN/ANov 10, 2026
CVE-2026-124895: Mozilla Firefox: Use-after-free in the Storage: localStorage & sessionStorage component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124894: Mozilla Firefox: Use-after-free in the Networking: Cookies component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124893: Mozilla Firefox: Use-after-free in the DOM: Workers component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124892: Mozilla Firefox: Use-after-free in the JavaScript: GC component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124891: Mozilla Firefox: Incorrect boundary conditions in the DOM: Selection component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124890: Mozilla Firefox: Use-after-free in the DOM: Core & HTML component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124889: Mozilla Firefox: Use-after-free in the CSS Parsing and Computation component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124888: Mozilla Firefox: Incorrect boundary conditions in the Layout: Text and Fonts component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124887: Mozilla Firefox: Incorrect boundary conditions in the Layout: Text and Fonts component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124886: Mozilla Firefox: Invalid pointer in the Layout: Text and Fonts componentN/AN/AN/ANov 10, 2026
CVE-2026-124885: Mozilla Firefox: Use-after-free in the Graphics: Text component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124884: Mozilla Firefox: Use-after-free in the JavaScript: GC component8.8 HighN/AN/ANov 10, 2026
CVE-2026-124883: Mozilla Firefox: Use-after-free in the DOM: Core & HTML component8.8 HighN/AN/ANov 10, 2026
176-200 of 517528