Vulnerabilities

Tracked app vulnerabilities

845 entries

All CVEs 16,390 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2026-65791 CRITICAL 9.8 Network 2026-08-11 Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	—	2026-08-11	Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
CVE-2026-62893 CRITICAL 9.8 Network 2026-08-11 Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	—	2026-08-11	Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
CVE-2026-62878 CRITICAL 9.8 Network 2026-08-11 Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	—	2026-08-11	Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-62815 CRITICAL 9.8 Network 2026-08-11 Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	—	2026-08-11	Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-66799 CRITICAL 7.8 2026-08-11 Windows Key Guard Elevation of Privilege Vulnerability	CRITICAL 7.8	—	—	—	2026-08-11	Windows Key Guard Elevation of Privilege Vulnerability
CVE-2026-16410 CRITICAL 9.8 Network 1 apps 2026-07-21 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.8	Network	—	1	2026-07-21	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16407 CRITICAL 9.8 Network 1 apps 2026-07-21 Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.8	Network	—	1	2026-07-21	Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16402 CRITICAL 9.8 Network 1 apps 2026-07-21 Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.8	Network	—	1	2026-07-21	Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16393 CRITICAL 9.1 Network 1 apps 2026-07-21 Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.1	Network	—	1	2026-07-21	Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16392 CRITICAL 9.1 Network 1 apps 2026-07-21 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.1	Network	—	1	2026-07-21	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16390 CRITICAL 9.1 Network 1 apps 2026-07-21 Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.1…	CRITICAL 9.1	Network	—	1	2026-07-21	Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.1…
CVE-2026-16389 CRITICAL 9.8 Network 1 apps 2026-07-21 Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.8	Network	—	1	2026-07-21	Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16388 CRITICAL 9.8 Network 1 apps 2026-07-21 Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.8	Network	—	1	2026-07-21	Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16387 CRITICAL 9.8 Network 1 apps 2026-07-21 Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CRITICAL 9.8	Network	—	1	2026-07-21	Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16383 CRITICAL 9.8 Network 1 apps 2026-07-21 Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CRITICAL 9.8	Network	—	1	2026-07-21	Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16382 CRITICAL 9.8 Network 1 apps 2026-07-21 Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.8	Network	—	1	2026-07-21	Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16381 CRITICAL 9.1 Network 1 apps 2026-07-21 Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 1…	CRITICAL 9.1	Network	—	1	2026-07-21	Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 1…
CVE-2026-16380 CRITICAL 9.1 Network 1 apps 2026-07-21 Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.1	Network	—	1	2026-07-21	Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16377 CRITICAL 9.8 Network 1 apps 2026-07-21 Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	CRITICAL 9.8	Network	—	1	2026-07-21	Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16375 CRITICAL 9.8 Network 1 apps 2026-07-21 Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.1…	CRITICAL 9.8	Network	—	1	2026-07-21	Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.1…
CVE-2026-16370 CRITICAL 9.1 Network 1 apps 2026-07-21 Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.1	Network	—	1	2026-07-21	Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16369 CRITICAL 9.8 Network 1 apps 2026-07-21 Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 14…	CRITICAL 9.8	Network	—	1	2026-07-21	Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 14…
CVE-2026-16368 CRITICAL 9.8 Network 1 apps 2026-07-21 Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and T…	CRITICAL 9.8	Network	—	1	2026-07-21	Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and T…
CVE-2026-16367 CRITICAL 10.0 Network 1 apps 2026-07-21 Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 10.0	Network	—	1	2026-07-21	Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16364 CRITICAL 9.1 Network 1 apps 2026-07-21 Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	CRITICAL 9.1	Network	—	1	2026-07-21	Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16363 CRITICAL 9.8 Network 1 apps 2026-07-21 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird …	CRITICAL 9.8	Network	—	1	2026-07-21	JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird …
CVE-2026-16361 CRITICAL 9.8 Network 1 apps 2026-07-21 Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of th…	CRITICAL 9.8	Network	—	1	2026-07-21	Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of th…
CVE-2026-16360 CRITICAL 9.8 Network 1 apps 2026-07-21 Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume th…	CRITICAL 9.8	Network	—	1	2026-07-21	Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume th…
CVE-2026-16359 CRITICAL 9.1 Network 1 apps 2026-07-21 Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbi…	CRITICAL 9.1	Network	—	1	2026-07-21	Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbi…
CVE-2026-16358 CRITICAL 9.8 Network 1 apps 2026-07-21 Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153…	CRITICAL 9.8	Network	—	1	2026-07-21	Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153…
CVE-2026-16357 CRITICAL 9.8 Network 1 apps 2026-07-21 Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, …	CRITICAL 9.8	Network	—	1	2026-07-21	Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, …
CVE-2026-16356 CRITICAL 9.8 Network 1 apps 2026-07-21 Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.…	CRITICAL 9.8	Network	—	1	2026-07-21	Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.…
CVE-2026-16355 CRITICAL 9.8 Network 1 apps 2026-07-21 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 15…	CRITICAL 9.8	Network	—	1	2026-07-21	JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 15…
CVE-2026-16353 CRITICAL 9.8 Network 1 apps 2026-07-21 Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, …	CRITICAL 9.8	Network	—	1	2026-07-21	Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, …
CVE-2026-16352 CRITICAL 9.8 Network 1 apps 2026-07-21 Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.…	CRITICAL 9.8	Network	—	1	2026-07-21	Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.…
CVE-2026-16351 CRITICAL 9.8 Network 1 apps 2026-07-21 Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thu…	CRITICAL 9.8	Network	—	1	2026-07-21	Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thu…
CVE-2026-16350 CRITICAL 9.8 Network 1 apps 2026-07-21 Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunder…	CRITICAL 9.8	Network	—	1	2026-07-21	Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunder…
CVE-2026-16349 CRITICAL 9.8 Network 1 apps 2026-07-21 Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 15…	CRITICAL 9.8	Network	—	1	2026-07-21	Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 15…
CVE-2026-57092 CRITICAL 9.9 Network 2026-07-14 Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.	CRITICAL 9.9	Network	—	—	2026-07-14	Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.
CVE-2026-56190 CRITICAL 9.8 Network 2026-07-14 Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	—	2026-07-14	Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.
CVE-2026-56188 CRITICAL 9.8 Network 2026-07-14 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to…	CRITICAL 9.8	Network	—	—	2026-07-14	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to…
CVE-2026-56159 CRITICAL 9.8 Network 2026-07-14 Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	—	2026-07-14	Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-50518 CRITICAL 9.8 Network 2026-07-14 Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	—	2026-07-14	Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-50447 CRITICAL 9.8 Network 2026-07-14 Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	—	2026-07-14	Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVE-2026-50380 CRITICAL 9.6 Network 2026-07-14 Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.	CRITICAL 9.6	Network	—	—	2026-07-14	Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVE-2026-54990 CRITICAL 9.8 Network 2026-07-14 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	—	2026-07-14	Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-49798 CRITICAL 9.3 Local 2026-07-14 Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.	CRITICAL 9.3	Local	—	—	2026-07-14	Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
CVE-2026-49172 CRITICAL 9.8 Network 2026-07-14 Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	—	2026-07-14	Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.
CVE-2026-42990 CRITICAL 9.8 Network 2026-07-14 Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	—	2026-07-14	Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.
CVE-2026-12316 CRITICAL 9.1 Network 1 apps 2026-06-16 Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.	CRITICAL 9.1	Network	—	1	2026-06-16	Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.