
Vulnerability Index
A continuously updated record of validated vulnerabilities discovered by NebuSec across open-source and commercial software. Entries are disclosed when possible and redacted when details would create avoidable risk.
Nebu security research · continuously updated
1179+
vulnerabilities found
200+
public CVEs
13+
projects affected
1179 rows
| 1 | CVE-2026-10702 | JavaScript Engine: JIT miscompilation leading to type confusion in the JIT component | fixed | type-confusion | 4.3 | Firefox < 151.0.3 |
| 2 | CVE-2026-113019 | Turbolev: v8 stale map propagation across migration causes smi elements corruption | fixed | type-confusion | 8.8 | Chrome < 156.0.8078.47 · Windows · Linux · macOS |
| 3 | CVE-2026-113193 | Maglev: unsound optimization for private accessor can lead to type confusion | fixed | type-confusion | Chrome < 156.0.8078.47 · Windows · Linux · macOS | |
| 4 | CVE-2026-16363 | JIT miscompilation in the JavaScript: WebAssembly component | fixed | jit-miscompilation | Firefox < 153 · Firefox ESR 140.x < 140.13 | |
| 5 | CVE-2026-16368 | Incorrect boundary conditions in the JavaScript: WebAssembly component | fixed | integer-overflow | Firefox < 153 · Firefox ESR 140.x < 140.13 |
CVE-2026-10702
fixedCVE-2026-113019
fixedCVE-2026-113193
fixedtype-confusionChrome < 156.0.8078.47 · Windows · Linux · macOSCVE-2026-16363
fixedjit-miscompilationFirefox < 153 · Firefox ESR 140.x < 140.13CVE-2026-16368
fixedinteger-overflowFirefox < 153 · Firefox ESR 140.x < 140.13
Status
Score
Backed by Y Combinator.
Talk with our team about your codebase, infrastructure, and security priorities.





