Vulnerabilities

Tracked app vulnerabilities

18,848 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 18,848
Actively exploited: 304
Publication window: 2004-07-27 → 2026-11-11

All CVEs 18,848 CISA KEV 304 Public exploit 428 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,848 entries Windows Hide N/A Clear all

CVE	Severity	KEV	Published
CVE-2026-117949 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117948 MEDIUM 6.3 2026-10-27 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117947 MEDIUM 6.3 2026-10-27 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117946 CRITICAL 9.8 2026-10-27 Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbi…	CRITICAL 9.8	—	2026-10-27
CVE-2026-117945 CRITICAL 9.8 2026-10-27 Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	CRITICAL 9.8	—	2026-10-27
CVE-2026-117944 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117943 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117942 HIGH 7.3 2026-10-27 Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thun…	HIGH 7.3	—	2026-10-27
CVE-2026-117941 HIGH 8.8 2026-10-27 Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and…	HIGH 8.8	—	2026-10-27
CVE-2026-117940 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117939 MEDIUM 6.3 2026-10-27 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117938 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117937 HIGH 7.3 2026-10-27 Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 7.3	—	2026-10-27
CVE-2026-117936 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117935 MEDIUM 6.3 2026-10-27 Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117934 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117933 MEDIUM 5.4 2026-10-27 Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird …	MEDIUM 5.4	—	2026-10-27
CVE-2026-117932 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117931 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbi…	HIGH 8.8	—	2026-10-27
CVE-2026-117930 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 8.8	—	2026-10-27
CVE-2026-117929 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117928 HIGH 8.1 2026-10-27 Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.1	—	2026-10-27
CVE-2026-117927 MEDIUM 6.3 2026-10-27 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117926 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.1	—	2026-10-27
CVE-2026-117925 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117924 MEDIUM 6.3 2026-10-27 Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117923 MEDIUM 6.3 2026-10-27 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbi…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117922 HIGH 8.8 2026-10-27 Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 8.8	—	2026-10-27
CVE-2026-117921 HIGH 8.8 2026-10-27 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 15…	HIGH 8.8	—	2026-10-27
CVE-2026-117920 CRITICAL 9.6 2026-10-27 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	CRITICAL 9.6	—	2026-10-27
CVE-2026-117919 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117918 HIGH 8.8 2026-10-27 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.8	—	2026-10-27
CVE-2026-117917 CRITICAL 9.8 2026-10-27 Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and …	CRITICAL 9.8	—	2026-10-27
CVE-2026-117916 MEDIUM 6.3 2026-10-27 Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117915 HIGH 7.3 2026-10-27 Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Th…	HIGH 7.3	—	2026-10-27
CVE-2026-117914 MEDIUM 6.3 2026-10-27 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117913 MEDIUM 6.3 2026-10-27 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117912 HIGH 8.1 2026-10-27 Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thu…	HIGH 8.1	—	2026-10-27
CVE-2026-117911 MEDIUM 6.3 2026-10-27 Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117910 HIGH 7.3 2026-10-27 Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 7.3	—	2026-10-27
CVE-2026-117909 MEDIUM 6.3 2026-10-27 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117908 MEDIUM 6.3 2026-10-27 Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117907 MEDIUM 6.3 2026-10-27 Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbir…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117906 MEDIUM 6.3 2026-10-27 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117905 MEDIUM 6.3 2026-10-27 Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117904 HIGH 8.8 2026-10-27 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117903 MEDIUM 6.3 2026-10-27 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbi…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117902 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117901 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117900 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbi…	HIGH 8.8	—	2026-10-27

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM