Vulnerabilities

Tracked app vulnerabilities

18,765 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 18,765
Actively exploited: 304
Publication window: 2004-07-27 → 2026-11-10

All CVEs 18,765 CISA KEV 304 Public exploit 428 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,765 entries Windows Hide N/A Clear all

CVE	Severity	KEV	Published
CVE-2026-117966 HIGH 8.1 2026-10-27 Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 8.1	—	2026-10-27
CVE-2026-117965 HIGH 8.1 2026-10-27 Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117964 HIGH 8.8 2026-10-27 Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117963 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thund…	HIGH 8.1	—	2026-10-27
CVE-2026-117962 CRITICAL 9.6 2026-10-27 Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Th…	CRITICAL 9.6	—	2026-10-27
CVE-2026-117961 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thu…	HIGH 8.1	—	2026-10-27
CVE-2026-117960 MEDIUM 4.7 2026-10-27 Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 4.7	—	2026-10-27
CVE-2026-117959 HIGH 8.1 2026-10-27 Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	HIGH 8.1	—	2026-10-27
CVE-2026-117958 HIGH 8.1 2026-10-27 Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117957 HIGH 8.1 2026-10-27 Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117956 HIGH 8.8 2026-10-27 Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117955 HIGH 8.1 2026-10-27 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 1…	HIGH 8.1	—	2026-10-27
CVE-2026-117954 HIGH 8.8 2026-10-27 Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.8	—	2026-10-27
CVE-2026-117953 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117952 HIGH 8.1 2026-10-27 Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.1	—	2026-10-27
CVE-2026-117951 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117950 HIGH 8.8 2026-10-27 Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbir…	HIGH 8.8	—	2026-10-27
CVE-2026-117949 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117948 MEDIUM 6.3 2026-10-27 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117947 MEDIUM 6.3 2026-10-27 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117946 CRITICAL 9.8 2026-10-27 Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbi…	CRITICAL 9.8	—	2026-10-27
CVE-2026-117945 CRITICAL 9.8 2026-10-27 Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	CRITICAL 9.8	—	2026-10-27
CVE-2026-117944 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117943 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117942 HIGH 7.3 2026-10-27 Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thun…	HIGH 7.3	—	2026-10-27
CVE-2026-117941 HIGH 8.8 2026-10-27 Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and…	HIGH 8.8	—	2026-10-27
CVE-2026-117940 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117939 MEDIUM 6.3 2026-10-27 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117938 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117937 HIGH 7.3 2026-10-27 Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 7.3	—	2026-10-27
CVE-2026-117936 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117935 MEDIUM 6.3 2026-10-27 Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117934 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117933 MEDIUM 5.4 2026-10-27 Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird …	MEDIUM 5.4	—	2026-10-27
CVE-2026-117932 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117931 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbi…	HIGH 8.8	—	2026-10-27
CVE-2026-117930 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 8.8	—	2026-10-27
CVE-2026-117929 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117928 HIGH 8.1 2026-10-27 Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.1	—	2026-10-27
CVE-2026-117927 MEDIUM 6.3 2026-10-27 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117926 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.1	—	2026-10-27
CVE-2026-117925 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117924 MEDIUM 6.3 2026-10-27 Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117923 MEDIUM 6.3 2026-10-27 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbi…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117922 HIGH 8.8 2026-10-27 Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 8.8	—	2026-10-27
CVE-2026-117921 HIGH 8.8 2026-10-27 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 15…	HIGH 8.8	—	2026-10-27
CVE-2026-117920 CRITICAL 9.6 2026-10-27 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	CRITICAL 9.6	—	2026-10-27
CVE-2026-117919 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117918 HIGH 8.8 2026-10-27 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.8	—	2026-10-27
CVE-2026-117917 CRITICAL 9.8 2026-10-27 Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and …	CRITICAL 9.8	—	2026-10-27

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM