Vulnerabilities
Tracked app vulnerabilities
16,444 CVEs affect a tracked app or OS (all severities, all platforms). 286 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 16,444
- Actively exploited
- 286
- Publication window
- 2002-10-04 → 2026-08-19
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-1016
CRITICAL 9.8
1 app
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bug… |
|
CVE-2025-1015
MEDIUM 5.4
1 app
The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malici… |
|
CVE-2025-1014
HIGH 8.8
1 app
Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. This vulnerability was fixed in Fir… |
|
CVE-2025-1013
MEDIUM 6.5
1 app
A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak. This vu… |
|
CVE-2025-1012
HIGH 7.5
1 app
A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7,… |
|
CVE-2025-1011
HIGH 8.8
1 app
A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vul… |
|
CVE-2025-1010
HIGH 8.8
1 app
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefo… |
|
CVE-2025-1009
CRITICAL 9.8
1 app
An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, … |
|
CVE-2025-0510
MEDIUM 6.5
1 app
Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vu… |
|
CVE-2025-20636
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-20635
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-20634
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-0100
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-0099
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-0098
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-0097
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-0096
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-0095
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-0094
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-0091
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-0088
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-0015
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-53104
HIGH
KEV
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-52935
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49843
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49839
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49834
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49833
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49832
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49746
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49743
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49741
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49729
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49723
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49721
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-47892
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-46973
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-45582
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-45571
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-45569
CRITICAL
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-43705
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-39441
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-38420
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-38404
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-20142
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-20141
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-0037
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2023-40139
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2023-40138
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2023-40137
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |