Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

27,643 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
27,643
Actively exploited
377
Publication window
2004-07-27 → 2026-11-10
All CVEs 27,643 CISA KEV 377 Public exploit 503 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,643 entries Hide N/A Clear all
CVE
CVE-2026-118027
CRITICAL 9.1
Mozilla Firefox

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
CVE-2026-118026
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118025
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118024
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7.
CVE-2026-118023
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118022
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118021
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 1…
CVE-2026-118020
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118019
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153…
CVE-2026-118017
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118016
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118015
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118014
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118013
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118012
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118011
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118010
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118009
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118008
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118007
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7.
CVE-2026-118006
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118005
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
CVE-2026-118004
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159,…
CVE-2026-118003
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-118002
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and …
CVE-2026-118000
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.…
CVE-2026-117999
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Race condition in the IPC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117998
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…
CVE-2026-117997
CRITICAL 9.6
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird …
CVE-2026-117996
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117995
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thu…
CVE-2026-117994
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117993
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117992
MEDIUM 6.5
Mozilla Firefox Mozilla Thunderbird

Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunde…
CVE-2026-117991
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thu…
CVE-2026-117990
CRITICAL 9.6
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thund…
CVE-2026-117989
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117988
CRITICAL 9.6
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thu…
CVE-2026-117987
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117986
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117985
CRITICAL 9.6
Mozilla Firefox Mozilla Thunderbird

Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbir…
CVE-2026-117984
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159,…
CVE-2026-117983
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117982
CRITICAL 9.8
Mozilla Firefox Mozilla Thunderbird

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117981
CRITICAL 9.8
Mozilla Firefox Mozilla Thunderbird

Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117980
CRITICAL 9.8
Mozilla Firefox Mozilla Thunderbird

Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117979
HIGH 8.8
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunder…
CVE-2026-117978
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, a…
CVE-2026-117977
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Other issue in the Console component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
CVE-2026-117976
HIGH 8.1
Mozilla Firefox Mozilla Thunderbird

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM