Vulnerabilities

Tracked app vulnerabilities

18,214 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 18,214
Actively exploited: 296
Publication window: 2004-07-27 → 2026-11-11

All CVEs 18,214 CISA KEV 296 Public exploit 406 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,214 entries High Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2026-92053 HIGH 8.8 2026-09-15 Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 1…	HIGH 8.8	—		2026-09-15
CVE-2026-92052 HIGH 8.8 2026-09-15 Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunde…	HIGH 8.8	—		2026-09-15
CVE-2026-92049 HIGH 8.8 2026-09-15 Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—		2026-09-15
CVE-2026-92047 HIGH 8.8 2026-09-15 Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—		2026-09-15
CVE-2026-92046 HIGH 8.8 2026-09-15 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—		2026-09-15
CVE-2026-92044 HIGH 7.5 2026-09-15 Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.…	HIGH 7.5	—		2026-09-15
CVE-2026-92043 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunder…	HIGH 8.8	—		2026-09-15
CVE-2026-92042 HIGH 7.5 2026-09-15 Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 7.5	—		2026-09-15
CVE-2026-92040 HIGH 8.8 2026-09-15 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	HIGH 8.8	—		2026-09-15
CVE-2026-92029 HIGH 8.8 2026-09-15 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—		2026-09-15
CVE-2026-92028 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	HIGH 8.8	—		2026-09-15
CVE-2026-92027 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbi…	HIGH 8.8	—		2026-09-15
CVE-2026-92026 HIGH 8.8 2026-09-15 Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 14…	HIGH 8.8	—		2026-09-15
CVE-2026-92025 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunde…	HIGH 8.8	—		2026-09-15
CVE-2026-92024 HIGH 8.8 2026-09-15 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—		2026-09-15
CVE-2026-92023 HIGH 8.8 2026-09-15 Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—		2026-09-15
CVE-2026-92022 HIGH 8.8 2026-09-15 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	HIGH 8.8	—		2026-09-15
CVE-2026-92021 HIGH 8.8 2026-09-15 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.	HIGH 8.8	—		2026-09-15
CVE-2026-92020 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41…	HIGH 8.8	—		2026-09-15
CVE-2026-92019 HIGH 8.1 2026-09-15 Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153…	HIGH 8.1	—		2026-09-15
CVE-2026-92017 HIGH 8.8 2026-09-15 Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 15…	HIGH 8.8	—		2026-09-15
CVE-2026-92016 HIGH 8.8 2026-09-15 Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Th…	HIGH 8.8	—		2026-09-15
CVE-2026-92015 HIGH 8.8 2026-09-15 Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Th…	HIGH 8.8	—		2026-09-15
CVE-2026-92014 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, an…	HIGH 8.8	—		2026-09-15
CVE-2026-92013 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92012 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92011 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92010 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92009 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92008 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92007 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92006 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-86917 HIGH 7.8 macOS 2026-09-14 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may b…	HIGH 7.8	—	macOS	2026-09-14
CVE-2026-86904 HIGH 7.5 iOS 2026-09-14 A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be …	HIGH 7.5	—	iOS	2026-09-14
CVE-2026-86901 HIGH 7.1 macOS 2026-09-14 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT vol…	HIGH 7.1	—	macOS	2026-09-14
CVE-2026-86895 HIGH 7.5 iOS 2026-09-14 An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A …	HIGH 7.5	—	iOS	2026-09-14
CVE-2026-86894 HIGH 7.5 macOS 2026-09-14 A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox.	HIGH 7.5	—	macOS	2026-09-14
CVE-2026-84632 HIGH 7.3 iOS macOS 2026-09-14 The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequo…	HIGH 7.3	—	iOS macOS	2026-09-14
CVE-2026-84631 HIGH 7.8 macOS 2026-09-14 This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges.	HIGH 7.8	—	macOS	2026-09-14
CVE-2026-84629 HIGH 7.5 iOS 2026-09-14 This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able …	HIGH 7.5	—	iOS	2026-09-14
CVE-2026-84623 HIGH 7.5 iOS 2026-09-14 An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able …	HIGH 7.5	—	iOS	2026-09-14
CVE-2026-84620 HIGH 7.3 iOS macOS 2026-09-14 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, …	HIGH 7.3	—	iOS macOS	2026-09-14
CVE-2026-84611 HIGH 7.3 iOS macOS 2026-09-14 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G…	HIGH 7.3	—	iOS macOS	2026-09-14
CVE-2026-84607 HIGH 7.8 iOS macOS 2026-09-14 A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac…	HIGH 7.8	—	iOS macOS	2026-09-14
CVE-2026-84606 HIGH 7.5 iOS macOS 2026-09-14 A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may…	HIGH 7.5	—	iOS macOS	2026-09-14
CVE-2026-84598 HIGH 7.5 iOS 2026-09-14 A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with phy…	HIGH 7.5	—	iOS	2026-09-14
CVE-2026-84584 HIGH 8.4 macOS 2026-09-14 This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox.	HIGH 8.4	—	macOS	2026-09-14
CVE-2026-84581 HIGH 8.4 macOS 2026-09-14 A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a ma…	HIGH 8.4	—	macOS	2026-09-14
CVE-2026-84580 HIGH 8.4 macOS 2026-09-14 The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break ou…	HIGH 8.4	—	macOS	2026-09-14
CVE-2026-84578 HIGH 8.8 macOS 2026-09-14 A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to brea…	HIGH 8.8	—	macOS	2026-09-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM