Vulnerabilities

Tracked app vulnerabilities

18,032 CVEs affect a tracked app or OS (all severities, Windows). 302 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 18,032
Actively exploited: 302
Publication window: 1997-01-01 → 2026-10-06

All CVEs 18,032 CISA KEV 302 Public exploit 564 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,032 entries Windows Clear all

CVE	Severity	KEV	Published
CVE-2026-92066 CRITICAL 9.8 2026-09-15 Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.8	—	2026-09-15
CVE-2026-92065 HIGH 8.8 2026-09-15 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird…	HIGH 8.8	—	2026-09-15
CVE-2026-92064 HIGH 8.8 2026-09-15 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird…	HIGH 8.8	—	2026-09-15
CVE-2026-92063 MEDIUM 6.5 2026-09-15 Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	MEDIUM 6.5	—	2026-09-15
CVE-2026-92062 HIGH 8.8 2026-09-15 Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—	2026-09-15
CVE-2026-92061 CRITICAL 9.8 2026-09-15 Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.8	—	2026-09-15
CVE-2026-92060 HIGH 8.8 2026-09-15 Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—	2026-09-15
CVE-2026-92059 CRITICAL 9.3 2026-09-15 Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 15…	CRITICAL 9.3	—	2026-09-15
CVE-2026-92058 HIGH 8.8 2026-09-15 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—	2026-09-15
CVE-2026-92057 CRITICAL 9.1 2026-09-15 Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CRITICAL 9.1	—	2026-09-15
CVE-2026-92056 HIGH 8.8 2026-09-15 Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—	2026-09-15
CVE-2026-92055 HIGH 8.8 2026-09-15 Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—	2026-09-15
CVE-2026-92054 HIGH 8.8 2026-09-15 Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—	2026-09-15
CVE-2026-92053 HIGH 8.8 2026-09-15 Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 1…	HIGH 8.8	—	2026-09-15
CVE-2026-92052 HIGH 8.8 2026-09-15 Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunde…	HIGH 8.8	—	2026-09-15
CVE-2026-92051 CRITICAL 9.1 2026-09-15 Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.1	—	2026-09-15
CVE-2026-92050 CRITICAL 9.1 2026-09-15 Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.1	—	2026-09-15
CVE-2026-92049 HIGH 8.8 2026-09-15 Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—	2026-09-15
CVE-2026-92048 CRITICAL 9.0 2026-09-15 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird…	CRITICAL 9.0	—	2026-09-15
CVE-2026-92047 HIGH 8.8 2026-09-15 Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—	2026-09-15
CVE-2026-92046 HIGH 8.8 2026-09-15 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—	2026-09-15
CVE-2026-92045 CRITICAL 9.6 2026-09-15 Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, a…	CRITICAL 9.6	—	2026-09-15
CVE-2026-92044 HIGH 7.5 2026-09-15 Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.…	HIGH 7.5	—	2026-09-15
CVE-2026-92043 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunder…	HIGH 8.8	—	2026-09-15
CVE-2026-92042 HIGH 7.5 2026-09-15 Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 7.5	—	2026-09-15
CVE-2026-92041 CRITICAL 9.1 2026-09-15 Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CRITICAL 9.1	—	2026-09-15
CVE-2026-92040 HIGH 8.8 2026-09-15 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	HIGH 8.8	—	2026-09-15
CVE-2026-92039 MEDIUM 6.3 2026-09-15 Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	MEDIUM 6.3	—	2026-09-15
CVE-2026-92038 CRITICAL 9.1 2026-09-15 Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153…	CRITICAL 9.1	—	2026-09-15
CVE-2026-92037 CRITICAL 9.8 2026-09-15 Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.8	—	2026-09-15
CVE-2026-92036 CRITICAL 9.8 2026-09-15 Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.8	—	2026-09-15
CVE-2026-92035 CRITICAL 9.6 2026-09-15 Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153…	CRITICAL 9.6	—	2026-09-15
CVE-2026-92034 CRITICAL 9.1 2026-09-15 Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.1	—	2026-09-15
CVE-2026-92032 CRITICAL 9.6 2026-09-15 Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbir…	CRITICAL 9.6	—	2026-09-15
CVE-2026-92031 MEDIUM 6.5 2026-09-15 Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156…	MEDIUM 6.5	—	2026-09-15
CVE-2026-92030 MEDIUM 5.4 2026-09-15 Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	MEDIUM 5.4	—	2026-09-15
CVE-2026-92029 HIGH 8.8 2026-09-15 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—	2026-09-15
CVE-2026-92028 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	HIGH 8.8	—	2026-09-15
CVE-2026-92027 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbi…	HIGH 8.8	—	2026-09-15
CVE-2026-92026 HIGH 8.8 2026-09-15 Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 14…	HIGH 8.8	—	2026-09-15
CVE-2026-92025 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunde…	HIGH 8.8	—	2026-09-15
CVE-2026-92024 HIGH 8.8 2026-09-15 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—	2026-09-15
CVE-2026-92023 HIGH 8.8 2026-09-15 Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—	2026-09-15
CVE-2026-92022 HIGH 8.8 2026-09-15 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	HIGH 8.8	—	2026-09-15
CVE-2026-92021 HIGH 8.8 2026-09-15 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.	HIGH 8.8	—	2026-09-15
CVE-2026-92020 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41…	HIGH 8.8	—	2026-09-15
CVE-2026-92019 HIGH 8.1 2026-09-15 Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153…	HIGH 8.1	—	2026-09-15
CVE-2026-92018 CRITICAL 9.6 2026-09-15 Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	CRITICAL 9.6	—	2026-09-15
CVE-2026-92017 HIGH 8.8 2026-09-15 Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 15…	HIGH 8.8	—	2026-09-15
CVE-2026-92016 HIGH 8.8 2026-09-15 Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Th…	HIGH 8.8	—	2026-09-15

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM