public vulnerability index

browsers.fail

search public Mozilla security bugs and security-relevant WebKit fixes. one query, two browsers, no login.

quick: firefox webkit bounty awarded use-after-free out-of-bounds

11958 items

11552 firefox bugs

406 webkit commits

2026-11-10 last index

bugzilla.mozilla.org

firefox

11552

public security bugs rated sec-critical, sec-high, sec-moderate or sec-low. includes the bounty flag when Mozilla has one.

2026-11-03 Graph cross-origin continuation URLs receive the account OAuth bearer token other 2026-11-02 iTIP REFRESH handler sends full calendar event data to attacker-controlled recipients via spoofed ATTENDEE other 2026-10-26 Default search engine reverted to Google after the app was closed (iOS) other 2026-10-18 Cross-site DAV SRV discovery can authorize a new password audience without user confirmation other 2026-10-13 Quadratic address-group accumulation in JSMime causes mail-triggered UI denial of service denial of service 2026-10-04 Native MS Graph client sends OAuth2 token to server-supplied @odata.nextLink URL without host validation (token leak + SSRF) other

browse firefox →

github.com/WebKit/WebKit

webkit

406

WebKit has no public security bug tracker, so this side reads commits and keeps the ones that mention a vulnerability pattern.

2026-11-10 SharedWorker process placement potential spoofing spoofing 2026-11-09 [WebCodecs][GStreamer] Use plane sourceWidthBytes when filling RGB frames uninitialized memory 2026-11-08 [GLib] NetworkCache::IOChannel::read() can unlock a destroyed channel use-after-free 2026-11-06 Refactoring: rename Options::useSharedArrayBuffer to Options::alwaysUseSharedArrayBuffer. out-of-bounds 2026-11-06 XPath sorting asserts on node-sets with nodes from different trees out-of-bounds 2026-11-04 [line-clamp] Share the text truncation of content and the block ellipsis out-of-bounds

browse webkit →

firefox

the indexer reads the Bugzilla REST API and keeps only bugs with a sec-* keyword.

webkit

commits are grouped by terms like use-after-free, oob, xss, sandbox escape and cve. it is a best effort, not a cve database.

reward

Mozilla does not publish the dollar amount for each bug. the site indexes the sec-bounty flag: awarded, nominated or denied.