Vulnerabilities

Tracked app vulnerabilities

19,253 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,253
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-13

All CVEs 19,253 CISA KEV 303 Public exploit 562 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,253 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2026-92050 CRITICAL 9.1 2026-09-15 Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.1	—		2026-09-15
CVE-2026-92049 HIGH 8.8 2026-09-15 Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—		2026-09-15
CVE-2026-92048 CRITICAL 9.0 2026-09-15 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird…	CRITICAL 9.0	—		2026-09-15
CVE-2026-92047 HIGH 8.8 2026-09-15 Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—		2026-09-15
CVE-2026-92046 HIGH 8.8 2026-09-15 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 8.8	—		2026-09-15
CVE-2026-92045 CRITICAL 9.6 2026-09-15 Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, a…	CRITICAL 9.6	—		2026-09-15
CVE-2026-92044 HIGH 7.5 2026-09-15 Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.…	HIGH 7.5	—		2026-09-15
CVE-2026-92043 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunder…	HIGH 8.8	—		2026-09-15
CVE-2026-92042 HIGH 7.5 2026-09-15 Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	HIGH 7.5	—		2026-09-15
CVE-2026-92041 CRITICAL 9.1 2026-09-15 Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	CRITICAL 9.1	—		2026-09-15
CVE-2026-92040 HIGH 8.8 2026-09-15 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	HIGH 8.8	—		2026-09-15
CVE-2026-92039 MEDIUM 6.3 2026-09-15 Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.	MEDIUM 6.3	—		2026-09-15
CVE-2026-92038 CRITICAL 9.1 2026-09-15 Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153…	CRITICAL 9.1	—		2026-09-15
CVE-2026-92037 CRITICAL 9.8 2026-09-15 Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.8	—		2026-09-15
CVE-2026-92036 CRITICAL 9.8 2026-09-15 Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.8	—		2026-09-15
CVE-2026-92035 CRITICAL 9.6 2026-09-15 Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153…	CRITICAL 9.6	—		2026-09-15
CVE-2026-92034 CRITICAL 9.1 2026-09-15 Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156.	CRITICAL 9.1	—		2026-09-15
CVE-2026-92032 CRITICAL 9.6 2026-09-15 Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbir…	CRITICAL 9.6	—		2026-09-15
CVE-2026-92031 MEDIUM 6.5 2026-09-15 Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156…	MEDIUM 6.5	—		2026-09-15
CVE-2026-92030 MEDIUM 5.4 2026-09-15 Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	MEDIUM 5.4	—		2026-09-15
CVE-2026-92029 HIGH 8.8 2026-09-15 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—		2026-09-15
CVE-2026-92028 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	HIGH 8.8	—		2026-09-15
CVE-2026-92027 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbi…	HIGH 8.8	—		2026-09-15
CVE-2026-92026 HIGH 8.8 2026-09-15 Use-after-free in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 14…	HIGH 8.8	—		2026-09-15
CVE-2026-92025 HIGH 8.8 2026-09-15 Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunde…	HIGH 8.8	—		2026-09-15
CVE-2026-92024 HIGH 8.8 2026-09-15 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—		2026-09-15
CVE-2026-92023 HIGH 8.8 2026-09-15 Use-after-free in the XML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	HIGH 8.8	—		2026-09-15
CVE-2026-92022 HIGH 8.8 2026-09-15 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	HIGH 8.8	—		2026-09-15
CVE-2026-92021 HIGH 8.8 2026-09-15 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16.	HIGH 8.8	—		2026-09-15
CVE-2026-92020 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41…	HIGH 8.8	—		2026-09-15
CVE-2026-92019 HIGH 8.1 2026-09-15 Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153…	HIGH 8.1	—		2026-09-15
CVE-2026-92018 CRITICAL 9.6 2026-09-15 Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thund…	CRITICAL 9.6	—		2026-09-15
CVE-2026-92017 HIGH 8.8 2026-09-15 Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 15…	HIGH 8.8	—		2026-09-15
CVE-2026-92016 HIGH 8.8 2026-09-15 Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Th…	HIGH 8.8	—		2026-09-15
CVE-2026-92015 HIGH 8.8 2026-09-15 Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Th…	HIGH 8.8	—		2026-09-15
CVE-2026-92014 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, an…	HIGH 8.8	—		2026-09-15
CVE-2026-92013 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92012 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92011 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92010 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92009 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92008 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92007 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92006 HIGH 8.8 2026-09-15 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.…	HIGH 8.8	—		2026-09-15
CVE-2026-92005 MEDIUM 5.3 2026-09-15 Use-after-free in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, T…	MEDIUM 5.3	—		2026-09-15
CVE-2026-85921 HIGH 8.2 Windows 2026-09-14 Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.	HIGH 8.2	—	Windows	2026-09-14
CVE-2026-70341 HIGH 8.5 2026-09-11 Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.	HIGH 8.5	—		2026-09-11
CVE-2026-87658 MEDIUM 4.3 2026-09-09 Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via …	MEDIUM 4.3	—		2026-09-09
CVE-2026-87657 LOW 3.1 2026-09-09 Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandb…	LOW 3.1	—		2026-09-09
CVE-2026-87656 MEDIUM 5.4 2026-09-09 Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted …	MEDIUM 5.4	—		2026-09-09

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM