The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-118180: Mozilla Thunderbird: When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response…N/AN/AN/AOct 27, 2026
CVE-2026-118179: Mozilla Thunderbird: Clicking a news: or snews: link that referenced a message-ID made Thunderbird connect, without asking, to the host and…N/AN/AN/AOct 27, 2026
CVE-2026-118178: Mozilla Thunderbird: A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored…N/AN/AN/AOct 27, 2026
CVE-2026-118177: Mozilla Thunderbird: When looking for calendars in a directory on a server, during account setup or when adding a new network calendar,…N/AN/AN/AOct 27, 2026
CVE-2026-118176: Mozilla Thunderbird: Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed…N/AN/AN/AOct 27, 2026
CVE-2026-118175: Mozilla Thunderbird: When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different…N/AN/AN/AOct 27, 2026
CVE-2026-118174: Mozilla Thunderbird: When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's…N/AN/AN/AOct 27, 2026
CVE-2026-118026: Mozilla: Invalid pointer in the JavaScript: GC componentN/AN/AN/AOct 27, 2026
CVE-2026-118025: Mozilla: Other issue in the SVG componentN/AN/AN/AOct 27, 2026
CVE-2026-118024: Mozilla: Use-after-free in the Graphics: Text componentN/AN/AN/AOct 27, 2026
CVE-2026-118023: Mozilla: Sandbox escape due to use-after-free in the Graphics: WebRender componentN/AN/AN/AOct 27, 2026
CVE-2026-118022: Mozilla: Sandbox escape due to use-after-free in the Disability Access APIs componentN/AN/AN/AOct 27, 2026
CVE-2026-118021: Mozilla: Sandbox escape due to use-after-free in the XPCOM componentN/AN/AN/AOct 27, 2026
CVE-2026-118020: Mozilla: Use-after-free in the Layout componentN/AN/AN/AOct 27, 2026
CVE-2026-118019: Mozilla: Race condition, use-after-free in the DOM: File componentN/AN/AN/AOct 27, 2026
CVE-2026-118017: Mozilla: Use-after-free in the SVG componentN/AN/AN/AOct 27, 2026
CVE-2026-118016: Mozilla: Use-after-free in the DOM: Core & HTML componentN/AN/AN/AOct 27, 2026
CVE-2026-118015: Mozilla: Use-after-free in the DOM: Core & HTML componentN/AN/AN/AOct 27, 2026
CVE-2026-118014: Mozilla: Use-after-free in the JavaScript Engine: JIT componentN/AN/AN/AOct 27, 2026
CVE-2026-118013: Mozilla: Use-after-free in the Layout: Images, Video, and HTML Frames componentN/AN/AN/AOct 27, 2026
CVE-2026-118012: Mozilla: Use-after-free in the DOM: Animation componentN/AN/AN/AOct 27, 2026
CVE-2026-118011: Mozilla: Frame poisoning in the CSS Parsing and Computation componentN/AN/AN/AOct 27, 2026
CVE-2026-118010: Mozilla: Use-after-free in the Disability Access APIs componentN/AN/AN/AOct 27, 2026
CVE-2026-118009: Mozilla: Integer overflow, use-after-free in the Graphics: Text componentN/AN/AN/AOct 27, 2026
CVE-2026-118008: Mozilla: Privilege escalation in the DOM: Navigation component8.8 HighN/AN/AOct 27, 2026
1-25 of 2420
›