Vulnerabilities

Tracked app vulnerabilities

18,214 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 18,214
Actively exploited: 296
Publication window: 2004-07-27 → 2026-11-11

All CVEs 18,214 CISA KEV 296 Public exploit 406 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,214 entries High Hide N/A Clear all

CVE	Severity	KEV	Published
CVE-2026-117976 HIGH 8.1 2026-10-27 Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117975 HIGH 8.8 2026-10-27 Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 8.8	—	2026-10-27
CVE-2026-117974 HIGH 8.8 2026-10-27 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117973 HIGH 8.8 2026-10-27 Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117972 HIGH 8.8 2026-10-27 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117970 HIGH 8.8 2026-10-27 Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117969 HIGH 8.8 2026-10-27 Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117968 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117967 HIGH 8.8 2026-10-27 Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117966 HIGH 8.1 2026-10-27 Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 8.1	—	2026-10-27
CVE-2026-117965 HIGH 8.1 2026-10-27 Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117964 HIGH 8.8 2026-10-27 Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117963 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thund…	HIGH 8.1	—	2026-10-27
CVE-2026-117961 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thu…	HIGH 8.1	—	2026-10-27
CVE-2026-117959 HIGH 8.1 2026-10-27 Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	HIGH 8.1	—	2026-10-27
CVE-2026-117958 HIGH 8.1 2026-10-27 Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117957 HIGH 8.1 2026-10-27 Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117956 HIGH 8.8 2026-10-27 Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117955 HIGH 8.1 2026-10-27 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 1…	HIGH 8.1	—	2026-10-27
CVE-2026-117954 HIGH 8.8 2026-10-27 Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.8	—	2026-10-27
CVE-2026-117953 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117952 HIGH 8.1 2026-10-27 Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.1	—	2026-10-27
CVE-2026-117951 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117950 HIGH 8.8 2026-10-27 Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbir…	HIGH 8.8	—	2026-10-27
CVE-2026-117949 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117943 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117942 HIGH 7.3 2026-10-27 Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thun…	HIGH 7.3	—	2026-10-27
CVE-2026-117941 HIGH 8.8 2026-10-27 Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and…	HIGH 8.8	—	2026-10-27
CVE-2026-117940 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117937 HIGH 7.3 2026-10-27 Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 7.3	—	2026-10-27
CVE-2026-117936 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117932 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117931 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbi…	HIGH 8.8	—	2026-10-27
CVE-2026-117930 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 8.8	—	2026-10-27
CVE-2026-117929 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117928 HIGH 8.1 2026-10-27 Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.1	—	2026-10-27
CVE-2026-117926 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.1	—	2026-10-27
CVE-2026-117925 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117922 HIGH 8.8 2026-10-27 Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 8.8	—	2026-10-27
CVE-2026-117921 HIGH 8.8 2026-10-27 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 15…	HIGH 8.8	—	2026-10-27
CVE-2026-117919 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117918 HIGH 8.8 2026-10-27 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.8	—	2026-10-27
CVE-2026-117915 HIGH 7.3 2026-10-27 Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Th…	HIGH 7.3	—	2026-10-27
CVE-2026-117912 HIGH 8.1 2026-10-27 Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thu…	HIGH 8.1	—	2026-10-27
CVE-2026-117910 HIGH 7.3 2026-10-27 Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 7.3	—	2026-10-27
CVE-2026-117904 HIGH 8.8 2026-10-27 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117901 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117900 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbi…	HIGH 8.8	—	2026-10-27
CVE-2026-117899 HIGH 8.8 2026-10-27 Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117897 HIGH 7.3 2026-10-27 Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird …	HIGH 7.3	—	2026-10-27

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM