Vulnerabilities

Tracked app vulnerabilities

7,772 entries

All CVEs 16,390 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2026-62720 HIGH 6.5 2026-08-11 Windows DHCP Server Information Disclosure Vulnerability	HIGH 6.5	—	—	—	2026-08-11	Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-62719 HIGH 7.8 2026-08-11 Windows Message Queuing Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-08-11	Windows Message Queuing Elevation of Privilege Vulnerability
CVE-2026-62718 HIGH 6.5 2026-08-11 Windows DHCP Server Information Disclosure Vulnerability	HIGH 6.5	—	—	—	2026-08-11	Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-62715 HIGH 6.5 2026-08-11 Windows DHCP Server Information Disclosure Vulnerability	HIGH 6.5	—	—	—	2026-08-11	Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-62714 HIGH 6.5 2026-08-11 Windows DHCP Server Information Disclosure Vulnerability	HIGH 6.5	—	—	—	2026-08-11	Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-62709 HIGH 5.5 2026-08-11 Windows GDI+ Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2026-08-11	Windows GDI+ Information Disclosure Vulnerability
CVE-2026-62708 HIGH 6.4 2026-08-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH 6.4	—	—	—	2026-08-11	Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-62703 HIGH 5.5 2026-08-11 Windows DWM Core Library Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2026-08-11	Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-62702 HIGH 6.8 2026-08-11 Windows Graphics Kernel Denial of Service Vulnerability	HIGH 6.8	—	—	—	2026-08-11	Windows Graphics Kernel Denial of Service Vulnerability
CVE-2026-62698 HIGH 7.8 2026-08-11 Microsoft Digest Authentication Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-08-11	Microsoft Digest Authentication Elevation of Privilege Vulnerability
CVE-2026-61936 HIGH 5.5 2026-08-11 Windows Defender Firewall Service Security Feature Bypass Vulnerability	HIGH 5.5	—	—	—	2026-08-11	Windows Defender Firewall Service Security Feature Bypass Vulnerability
CVE-2026-61933 HIGH 5.5 2026-08-11 Windows DWM Core Library Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2026-08-11	Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-61928 HIGH 5.5 2026-08-11 Windows Hello Tampering Vulnerability	HIGH 5.5	—	—	—	2026-08-11	Windows Hello Tampering Vulnerability
CVE-2026-61924 HIGH 6.5 2026-08-11 Windows Remote Desktop Client Information Disclosure Vulnerability	HIGH 6.5	—	—	—	2026-08-11	Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-61923 HIGH 7.8 2026-08-11 Windows Display Enhancement Service Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-08-11	Windows Display Enhancement Service Elevation of Privilege Vulnerability
CVE-2026-61921 HIGH 6.5 2026-08-11 Windows Remote Desktop Client Information Disclosure Vulnerability	HIGH 6.5	—	—	—	2026-08-11	Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-61368 HIGH 5.0 2026-08-11 Windows Hyper-V Information Disclosure Vulnerability	HIGH 5.0	—	—	—	2026-08-11	Windows Hyper-V Information Disclosure Vulnerability
CVE-2026-61366 HIGH 7.0 2026-08-11 Windows Network Connection Broker Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2026-08-11	Windows Network Connection Broker Elevation of Privilege Vulnerability
CVE-2026-61360 HIGH 5.5 2026-08-11 Windows GDI Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2026-08-11	Windows GDI Information Disclosure Vulnerability
CVE-2026-61357 HIGH 7.8 2026-08-11 Application Information Services Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2026-08-11	Application Information Services Elevation of Privilege Vulnerability
CVE-2026-61350 HIGH 4.6 2026-08-11 Windows NTFS Information Disclosure Vulnerability	HIGH 4.6	—	—	—	2026-08-11	Windows NTFS Information Disclosure Vulnerability
CVE-2026-61347 HIGH 5.5 2026-08-11 Windows Event Logging Service Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2026-08-11	Windows Event Logging Service Information Disclosure Vulnerability
CVE-2026-61345 HIGH 6.5 2026-08-11 Microsoft Remote Registry Service Denial of Service Vulnerability	HIGH 6.5	—	—	—	2026-08-11	Microsoft Remote Registry Service Denial of Service Vulnerability
CVE-2026-59138 HIGH 6.5 2026-08-11 Microsoft Remote Registry Service Denial of Service Vulnerability	HIGH 6.5	—	—	—	2026-08-11	Microsoft Remote Registry Service Denial of Service Vulnerability
CVE-2026-59137 HIGH 5.5 2026-08-11 Windows Event Logging Service Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2026-08-11	Windows Event Logging Service Information Disclosure Vulnerability
CVE-2026-59136 HIGH 5.5 2026-08-11 Microsoft COM for Windows Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2026-08-11	Microsoft COM for Windows Information Disclosure Vulnerability
CVE-2026-59135 HIGH 5.5 2026-08-11 Microsoft Windows Search Component Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2026-08-11	Microsoft Windows Search Component Information Disclosure Vulnerability
CVE-2026-59132 HIGH 7.5 2026-08-11 Windows TCP/IP Denial of Service Vulnerability	HIGH 7.5	—	—	—	2026-08-11	Windows TCP/IP Denial of Service Vulnerability
CVE-2026-59131 HIGH 5.6 2026-08-11 AMD Zen Information Disclosure Vulnerability	HIGH 5.6	—	—	—	2026-08-11	AMD Zen Information Disclosure Vulnerability
CVE-2026-59128 HIGH 5.5 2026-08-11 Windows Encrypting File System (EFS) Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2026-08-11	Windows Encrypting File System (EFS) Information Disclosure Vulnerability
CVE-2026-56179 MEDIUM 8.3 2026-08-11 Windows Network Address Translation (NAT) Spoofing Vulnerability	MEDIUM 8.3	—	—	—	2026-08-11	Windows Network Address Translation (NAT) Spoofing Vulnerability
CVE-2026-14266 HIGH 7.8 Local 1 apps 2026-07-29 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on …	HIGH 7.8	Local	—	1	2026-07-29	7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on …
CVE-2026-14899 HIGH 7.5 Network 1 apps 2026-07-22 The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a singl…	HIGH 7.5	Network	—	1	2026-07-22	The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a singl…
CVE-2026-16410 CRITICAL 9.8 Network 1 apps 2026-07-21 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.8	Network	—	1	2026-07-21	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16409 HIGH 7.5 Network 1 apps 2026-07-21 Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16407 CRITICAL 9.8 Network 1 apps 2026-07-21 Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.8	Network	—	1	2026-07-21	Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16403 MEDIUM 6.5 Network 1 apps 2026-07-21 Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	MEDIUM 6.5	Network	—	1	2026-07-21	Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16402 CRITICAL 9.8 Network 1 apps 2026-07-21 Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.8	Network	—	1	2026-07-21	Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16401 HIGH 8.8 Network 1 apps 2026-07-21 Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 8.8	Network	—	1	2026-07-21	Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16400 HIGH 7.5 Network 1 apps 2026-07-21 Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16399 HIGH 7.5 Network 1 apps 2026-07-21 Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16398 HIGH 7.5 Network 1 apps 2026-07-21 Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16396 HIGH 8.8 Network 1 apps 2026-07-21 Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	HIGH 8.8	Network	—	1	2026-07-21	Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16393 CRITICAL 9.1 Network 1 apps 2026-07-21 Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.1	Network	—	1	2026-07-21	Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16392 CRITICAL 9.1 Network 1 apps 2026-07-21 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.1	Network	—	1	2026-07-21	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16391 HIGH 7.5 Network 1 apps 2026-07-21 Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 1…	HIGH 7.5	Network	—	1	2026-07-21	Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 1…
CVE-2026-16390 CRITICAL 9.1 Network 1 apps 2026-07-21 Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.1…	CRITICAL 9.1	Network	—	1	2026-07-21	Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.1…
CVE-2026-16389 CRITICAL 9.8 Network 1 apps 2026-07-21 Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.8	Network	—	1	2026-07-21	Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16388 CRITICAL 9.8 Network 1 apps 2026-07-21 Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.8	Network	—	1	2026-07-21	Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16387 CRITICAL 9.8 Network 1 apps 2026-07-21 Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CRITICAL 9.8	Network	—	1	2026-07-21	Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.