Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,765 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,765
Actively exploited
304
Publication window
2004-07-27 → 2026-11-10
All CVEs 18,765 CISA KEV 304 Public exploit 428 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,765 entries Windows Hide N/A Clear all
CVE
CVE-2026-118017
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118016
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118015
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118014
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118013
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118012
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118011
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118010
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118009
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118008
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118007
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7.
CVE-2026-118006
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118005
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118004
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159,…
CVE-2026-118003
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118002
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and …
CVE-2026-118000
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.…
CVE-2026-117999
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117998
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…
CVE-2026-117997
CRITICAL 9.6
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird …
CVE-2026-117996
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117995
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thu…
CVE-2026-117994
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117993
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117992
MEDIUM 6.5
Mozilla Firefox Mozilla Thunderbird

Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunde…
CVE-2026-117991
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thu…
CVE-2026-117990
CRITICAL 9.6
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thund…
CVE-2026-117989
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117988
CRITICAL 9.6
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thu…
CVE-2026-117987
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117986
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117985
CRITICAL 9.6
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbir…
CVE-2026-117984
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159,…
CVE-2026-117983
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117982
CRITICAL 9.8
Mozilla Firefox Mozilla Thunderbird

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117981
CRITICAL 9.8
Mozilla Firefox Mozilla Thunderbird

Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117980
CRITICAL 9.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117979
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunder…
CVE-2026-117978
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, a…
CVE-2026-117977
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Other issue in the Console component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117976
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117975
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, an…
CVE-2026-117974
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117973
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117972
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117971
CRITICAL 9.6
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunde…
CVE-2026-117970
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117969
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117968
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…
CVE-2026-117967
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM