Vulnerabilities

Tracked app vulnerabilities

18,765 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 18,765
Actively exploited: 304
Publication window: 2004-07-27 → 2026-11-10

All CVEs 18,765 CISA KEV 304 Public exploit 428 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,765 entries Windows Hide N/A Clear all

CVE	Severity	KEV	Published
CVE-2026-117916 MEDIUM 6.3 2026-10-27 Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117915 HIGH 7.3 2026-10-27 Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Th…	HIGH 7.3	—	2026-10-27
CVE-2026-117914 MEDIUM 6.3 2026-10-27 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117913 MEDIUM 6.3 2026-10-27 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117912 HIGH 8.1 2026-10-27 Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thu…	HIGH 8.1	—	2026-10-27
CVE-2026-117911 MEDIUM 6.3 2026-10-27 Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117910 HIGH 7.3 2026-10-27 Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 7.3	—	2026-10-27
CVE-2026-117909 MEDIUM 6.3 2026-10-27 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117908 MEDIUM 6.3 2026-10-27 Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117907 MEDIUM 6.3 2026-10-27 Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbir…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117906 MEDIUM 6.3 2026-10-27 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117905 MEDIUM 6.3 2026-10-27 Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117904 HIGH 8.8 2026-10-27 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117903 MEDIUM 6.3 2026-10-27 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbi…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117902 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117901 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117900 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbi…	HIGH 8.8	—	2026-10-27
CVE-2026-117899 HIGH 8.8 2026-10-27 Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117898 MEDIUM 6.3 2026-10-27 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117897 HIGH 7.3 2026-10-27 Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird …	HIGH 7.3	—	2026-10-27
CVE-2026-117896 MEDIUM 6.3 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117895 MEDIUM 6.3 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117894 MEDIUM 5.4 2026-10-27 Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderb…	MEDIUM 5.4	—	2026-10-27
CVE-2026-117893 MEDIUM 5.4 2026-10-27 Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 1…	MEDIUM 5.4	—	2026-10-27
CVE-2026-117892 HIGH 7.3 2026-10-27 Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 15…	HIGH 7.3	—	2026-10-27
CVE-2026-117891 HIGH 7.3 2026-10-27 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 7.3	—	2026-10-27
CVE-2026-117890 HIGH 7.3 2026-10-27 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	HIGH 7.3	—	2026-10-27
CVE-2026-117889 HIGH 7.3 2026-10-27 Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbi…	HIGH 7.3	—	2026-10-27
CVE-2026-117888 MEDIUM 5.4 2026-10-27 Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.…	MEDIUM 5.4	—	2026-10-27
CVE-2026-117887 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117886 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird …	HIGH 8.1	—	2026-10-27
CVE-2026-117885 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117884 HIGH 8.8 2026-10-27 Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbir…	HIGH 8.8	—	2026-10-27
CVE-2026-117883 HIGH 8.8 2026-10-27 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117882 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117881 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117880 MEDIUM 6.3 2026-10-27 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117879 HIGH 7.3 2026-10-27 Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird …	HIGH 7.3	—	2026-10-27
CVE-2026-117878 MEDIUM 6.3 2026-10-27 Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbir…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117877 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117876 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117875 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbir…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117874 MEDIUM 6.3 2026-10-27 Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and …	MEDIUM 6.3	—	2026-10-27
CVE-2026-117873 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thund…	HIGH 8.1	—	2026-10-27
CVE-2026-117872 HIGH 8.8 2026-10-27 Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 1…	HIGH 8.8	—	2026-10-27
CVE-2026-117871 HIGH 7.3 2026-10-27 Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 7.3	—	2026-10-27
CVE-2026-117870 HIGH 7.3 2026-10-27 Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thu…	HIGH 7.3	—	2026-10-27
CVE-2026-117869 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117868 CRITICAL 9.6 2026-10-27 Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thund…	CRITICAL 9.6	—	2026-10-27
CVE-2026-117867 HIGH 7.3 2026-10-27 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	HIGH 7.3	—	2026-10-27

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM