Skip to content
Appaloosa Scout

Vulnerabilities

Tracked app vulnerabilities

16,391 entries

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE
CVE-2026-21547
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21546
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21545
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21544
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21543
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21542
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21541
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21540
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21539
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21538
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21381
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21380
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21378
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21376
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21375
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21374
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21373
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21372
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21367
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21353
CRITICAL

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-21352
CRITICAL

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-20450
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-20449
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-20448
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-20447
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-20435
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-20433
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-47403
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-47401
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-47400
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-47392
CRITICAL

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-47384
HIGH

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-9078
MEDIUM 5.4 Network 1 apps

Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted RT…

CVE-2026-45585
MEDIUM 6.8 Physical

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerabi…

CVE-2026-8706
MEDIUM 6.5 Adjacent network 1 apps

Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receiv…

CVE-2026-8975
HIGH 8.8 Network 1 apps

Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume th…

CVE-2026-8974
HIGH 8.8 Network 1 apps

Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effor…

CVE-2026-8973
HIGH 8.8 Network 1 apps

Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h…

CVE-2026-8972
HIGH 8.8 Network 1 apps

Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVE-2026-8971
MEDIUM 6.5 Network 1 apps

Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVE-2026-8970
HIGH 8.8 Network 1 apps

Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVE-2026-8969
HIGH 8.1 Network 1 apps

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVE-2026-8968
HIGH 7.5 Network 1 apps

Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird…

CVE-2026-8967
HIGH 7.5 Network 1 apps

Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVE-2026-8966
HIGH 7.5 Network 1 apps

Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVE-2026-8965
HIGH 7.5 Network 1 apps

Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVE-2026-8964
HIGH 7.5 Network 1 apps

Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVE-2026-8963
HIGH 7.5 Network 1 apps

Spoofing issue in the Web Speech component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVE-2026-8962
HIGH 8.1 Network 1 apps

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

CVE-2026-8961
MEDIUM 6.5 Network 1 apps

Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.