Vulnerabilities

Tracked app vulnerabilities

19,339 CVEs affect a tracked app or OS (all severities, Windows). 304 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,339
Actively exploited: 304
Publication window: 1997-01-01 → 2026-10-13

All CVEs 19,339 CISA KEV 304 Public exploit 565 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,339 entries Windows Clear all

CVE	Severity	KEV	Published
CVE-2026-100814 HIGH 8.8 2026-09-29 Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, a…	HIGH 8.8	—	2026-09-29
CVE-2026-100813 HIGH 8.8 2026-09-29 Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100812 MEDIUM 6.5 2026-09-29 Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	MEDIUM 6.5	—	2026-09-29
CVE-2026-100811 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100810 CRITICAL 9.8 2026-09-29 Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	CRITICAL 9.8	—	2026-09-29
CVE-2026-100809 HIGH 8.1 2026-09-29 Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.1	—	2026-09-29
CVE-2026-100808 HIGH 8.8 2026-09-29 Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100807 HIGH 8.8 2026-09-29 Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird…	HIGH 8.8	—	2026-09-29
CVE-2026-100806 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	MEDIUM 4.3	—	2026-09-29
CVE-2026-100805 HIGH 7.5 2026-09-29 Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	HIGH 7.5	—	2026-09-29
CVE-2026-100804 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	CRITICAL 9.6	—	2026-09-29
CVE-2026-100803 HIGH 8.1 2026-09-29 Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 1…	HIGH 8.1	—	2026-09-29
CVE-2026-100802 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 4.3	—	2026-09-29
CVE-2026-100801 HIGH 8.8 2026-09-29 Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, …	HIGH 8.8	—	2026-09-29
CVE-2026-100800 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 1…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100799 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 4.3	—	2026-09-29
CVE-2026-100798 HIGH 8.1 2026-09-29 Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.1	—	2026-09-29
CVE-2026-100797 HIGH 8.8 2026-09-29 Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbir…	HIGH 8.8	—	2026-09-29
CVE-2026-100796 HIGH 8.8 2026-09-29 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100795 MEDIUM 6.5 2026-09-29 Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 6.5	—	2026-09-29
CVE-2026-100794 CRITICAL 9.6 2026-09-29 Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, …	CRITICAL 9.6	—	2026-09-29
CVE-2026-100793 MEDIUM 6.5 2026-09-29 JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 6.5	—	2026-09-29
CVE-2026-100792 HIGH 7.1 2026-09-29 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbir…	HIGH 7.1	—	2026-09-29
CVE-2026-100791 HIGH 8.8 2026-09-29 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi…	HIGH 8.8	—	2026-09-29
CVE-2026-100790 HIGH 8.8 2026-09-29 Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, F…	HIGH 8.8	—	2026-09-29
CVE-2026-100789 HIGH 8.8 2026-09-29 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, …	HIGH 8.8	—	2026-09-29
CVE-2026-100788 CRITICAL 9.8 2026-09-29 Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 1…	CRITICAL 9.8	—	2026-09-29
CVE-2026-100787 CRITICAL 9.6 2026-09-29 Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	CRITICAL 9.6	—	2026-09-29
CVE-2026-100786 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunder…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100785 HIGH 8.8 2026-09-29 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi…	HIGH 8.8	—	2026-09-29
CVE-2026-100784 HIGH 8.8 2026-09-29 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153…	HIGH 8.8	—	2026-09-29
CVE-2026-100783 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F…	MEDIUM 4.3	—	2026-09-29
CVE-2026-100782 HIGH 8.8 2026-09-29 Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunde…	HIGH 8.8	—	2026-09-29
CVE-2026-100781 CRITICAL 9.6 2026-09-29 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, T…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100780 HIGH 8.8 2026-09-29 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi…	HIGH 8.8	—	2026-09-29
CVE-2026-100779 HIGH 8.8 2026-09-29 Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, F…	HIGH 8.8	—	2026-09-29
CVE-2026-100778 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100777 HIGH 8.8 2026-09-29 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, …	HIGH 8.8	—	2026-09-29
CVE-2026-100776 HIGH 8.8 2026-09-29 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 15…	HIGH 8.8	—	2026-09-29
CVE-2026-100775 CRITICAL 9.6 2026-09-29 Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 15…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100774 HIGH 8.8 2026-09-29 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi…	HIGH 8.8	—	2026-09-29
CVE-2026-100773 HIGH 8.8 2026-09-29 Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, …	HIGH 8.8	—	2026-09-29
CVE-2026-100772 HIGH 8.8 2026-09-29 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi…	HIGH 8.8	—	2026-09-29
CVE-2026-100771 HIGH 8.1 2026-09-29 Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi…	HIGH 8.1	—	2026-09-29
CVE-2026-100770 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 1…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100769 HIGH 8.8 2026-09-29 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 15…	HIGH 8.8	—	2026-09-29
CVE-2026-100768 HIGH 8.8 2026-09-29 Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100767 HIGH 8.8 2026-09-29 Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F…	HIGH 8.8	—	2026-09-29
CVE-2026-100766 MEDIUM 4.3 2026-09-29 Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 15…	MEDIUM 4.3	—	2026-09-29
CVE-2026-100765 HIGH 8.8 2026-09-29 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.8	—	2026-09-29

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM