Vulnerabilities

Tracked app vulnerabilities

8,473 CVEs affect a tracked app or OS (all severities, Windows). 213 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 8,473
Actively exploited: 213
Publication window: 2002-10-04 → 2026-08-19

All CVEs 8,473 CISA KEV 213 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

8,473 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2016-0016 HIGH 7.8 2016-01-13 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.…	HIGH 7.8	—	—	2016-01-13
CVE-2016-0015 HIGH 7.8 2016-01-13 DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wind…	HIGH 7.8	—	—	2016-01-13
CVE-2016-0014 HIGH 7.8 2016-01-13 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.…	HIGH 7.8	—	—	2016-01-13
CVE-2016-0007 HIGH 7.8 2016-01-13 The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold …	HIGH 7.8	—	—	2016-01-13
CVE-2016-0006 HIGH 7.3 2016-01-13 The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold …	HIGH 7.3	—	—	2016-01-13
CVE-2016-0002 HIGH 7.5 2016-01-13 The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attacker…	HIGH 7.5	—	—	2016-01-13
CVE-2015-5663 HIGH 7.4 1 app 2015-12-30 The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extension…	HIGH 7.4	—	WinRAR	2015-12-30
CVE-2015-5652 N/A 1 app 2015-10-06 Untrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local users to gain privileges via a Trojan horse readline.pyd file…	N/A	—	Python	2015-10-06
CVE-2015-1283 LOW 1 app 2015-07-23 Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote …	LOW	—	Python	2015-07-23
CVE-2015-2740 N/A 1 app 2015-07-06 Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and T…	N/A	—	Mozilla Thunderbird	2015-07-06
CVE-2015-2739 N/A 1 app 2015-07-06 The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses…	N/A	—	Mozilla Thunderbird	2015-07-06
CVE-2015-2738 N/A 1 app 2015-07-06 The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x …	N/A	—	Mozilla Thunderbird	2015-07-06
CVE-2015-2737 N/A 1 app 2015-07-06 The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and …	N/A	—	Mozilla Thunderbird	2015-07-06
CVE-2015-2736 N/A 1 app 2015-07-06 The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesse…	N/A	—	Mozilla Thunderbird	2015-07-06
CVE-2015-2735 N/A 1 app 2015-07-06 nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory loca…	N/A	—	Mozilla Thunderbird	2015-07-06
CVE-2015-2734 N/A 1 app 2015-07-06 The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x be…	N/A	—	Mozilla Thunderbird	2015-07-06
CVE-2015-2731 N/A 1 app 2015-07-06 Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.…	N/A	—	Mozilla Thunderbird	2015-07-06
CVE-2015-2729 N/A 1 app 2015-07-06 The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not p…	N/A	—	Mozilla Thunderbird	2015-07-06
CVE-2015-2725 N/A 1 app 2015-07-06 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remo…	N/A	—	Mozilla Thunderbird	2015-07-06
CVE-2015-2724 N/A 1 app 2015-07-06 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird b…	N/A	—	Mozilla Thunderbird	2015-07-06
CVE-2015-4000 LOW 3.7 1 app 2015-05-21 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which…	LOW 3.7	—	Mozilla Thunderbird	2015-05-21
CVE-2015-2716 N/A 1 app 2015-05-14 Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute …	N/A	—	Mozilla Thunderbird	2015-05-14
CVE-2015-2713 N/A 1 app 2015-05-14 Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote …	N/A	—	Mozilla Thunderbird	2015-05-14
CVE-2015-2710 N/A 1 app 2015-05-14 Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote at…	N/A	—	Mozilla Thunderbird	2015-05-14
CVE-2015-2708 N/A 1 app 2015-05-14 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remo…	N/A	—	Mozilla Thunderbird	2015-05-14
CVE-2015-0797 N/A 1 app 2015-05-14 GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to …	N/A	—	Mozilla Thunderbird	2015-05-14
CVE-2015-0816 N/A 1 app 2015-04-01 Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remot…	N/A	—	Mozilla Thunderbird	2015-04-01
CVE-2015-0815 N/A 1 app 2015-04-01 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remo…	N/A	—	Mozilla Thunderbird	2015-04-01
CVE-2015-0813 N/A 1 app 2015-04-01 Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 on Linux,…	N/A	—	Mozilla Thunderbird	2015-04-01
CVE-2015-0807 N/A 1 app 2015-04-01 The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status cod…	N/A	—	Mozilla Thunderbird	2015-04-01
CVE-2015-0801 N/A 1 app 2015-04-01 Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 allow remote attackers to bypass the Same Origin Policy and execute arbi…	N/A	—	Mozilla Thunderbird	2015-04-01
CVE-2015-0836 N/A 1 app 2015-02-25 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remo…	N/A	—	Mozilla Thunderbird	2015-02-25
CVE-2015-0833 N/A 1 app 2015-02-25 Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Wind…	N/A	—	Mozilla Thunderbird	2015-02-25
CVE-2015-0831 N/A 1 app 2015-02-25 Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5,…	N/A	—	Mozilla Thunderbird	2015-02-25
CVE-2015-0827 N/A 1 app 2015-02-25 Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 all…	N/A	—	Mozilla Thunderbird	2015-02-25
CVE-2015-0822 N/A 1 app 2015-02-25 The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbit…	N/A	—	Mozilla Thunderbird	2015-02-25
CVE-2014-8639 N/A 1 app 2015-01-14 Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers with…	N/A	—	Mozilla Thunderbird	2015-01-14
CVE-2014-8638 N/A 1 app 2015-01-14 The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 omits …	N/A	—	Mozilla Thunderbird	2015-01-14
CVE-2014-8634 N/A 1 app 2015-01-14 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey…	N/A	—	Mozilla Thunderbird	2015-01-14
CVE-2014-9365 N/A 1 app 2014-12-12 The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when a…	N/A	—	Python	2014-12-12
CVE-2014-1595 N/A 1 app 2014-12-11 Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is n…	N/A	—	Mozilla Thunderbird	2014-12-11
CVE-2014-1594 N/A 1 app 2014-12-11 Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers to execute arbitrary…	N/A	—	Mozilla Thunderbird	2014-12-11
CVE-2014-1593 N/A 1 app 2014-12-11 Stack-based buffer overflow in the mozilla::FileBlockCache::Read function in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3…	N/A	—	Mozilla Thunderbird	2014-12-11
CVE-2014-1592 N/A 1 app 2014-12-11 Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 3…	N/A	—	Mozilla Thunderbird	2014-12-11
CVE-2014-1590 N/A 1 app 2014-12-11 The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allow…	N/A	—	Mozilla Thunderbird	2014-12-11
CVE-2014-1587 N/A 1 app 2014-12-11 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey…	N/A	—	Mozilla Thunderbird	2014-12-11
CVE-2014-9150 N/A 1 app 2014-11-30 Race condition in the MoveFileEx call hook feature in Adobe Reader and Acrobat 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection m…	N/A	—	Adobe Acrobat Reader (64-bit)	2014-11-30
CVE-2014-2667 N/A 1 app 2014-11-16 Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when exist_ok is set to true and multiple threads are used, might allow…	N/A	—	Python	2014-11-16
CVE-2014-1586 N/A 1 app 2014-10-15 content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consider whether WebRTC…	N/A	—	Mozilla Thunderbird	2014-10-15
CVE-2014-1585 N/A 1 app 2014-10-15 The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 d…	N/A	—	Mozilla Thunderbird	2014-10-15