Vulnerabilities
Tracked app vulnerabilities
2,726 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 2,726
- Actively exploited
- 48
- Publication window
- 2007-08-28 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-5472
CRITICAL 9.8
A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no … |
|
CVE-2017-5470
CRITICAL 9.8
Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
|
CVE-2017-5469
CRITICAL 9.8
Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.… |
|
CVE-2017-5465
CRITICAL 9.1
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied i… |
|
CVE-2017-5464
CRITICAL 9.8
During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruptio… |
|
CVE-2017-5460
CRITICAL 9.8
A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potential… |
|
CVE-2017-5459
CRITICAL 9.8
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR… |
|
CVE-2017-5447
CRITICAL 9.1
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to … |
|
CVE-2017-5446
CRITICAL 9.8
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. Th… |
|
CVE-2017-5443
CRITICAL 9.8
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9… |
|
CVE-2017-5442
CRITICAL 9.8
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affe… |
|
CVE-2017-5441
CRITICAL 9.8
A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thund… |
|
CVE-2017-5440
CRITICAL 9.8
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objec… |
|
CVE-2017-5439
CRITICAL 9.8
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulner… |
|
CVE-2017-5438
CRITICAL 9.8
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially ex… |
|
CVE-2017-5435
CRITICAL 9.8
A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable cr… |
|
CVE-2017-5434
CRITICAL 9.8
A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird … |
|
CVE-2017-5433
CRITICAL 9.8
A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller whi… |
|
CVE-2017-5432
CRITICAL 9.8
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird … |
|
CVE-2017-5430
CRITICAL 9.8
Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that… |
|
CVE-2017-5429
CRITICAL 9.8
Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption a… |
|
CVE-2017-5413
CRITICAL 9.8
A segmentation fault can occur during some bidirectional layout operations. This vulnerability affects Firefox < 52 and Thunderbird < 52. |
|
CVE-2017-5410
CRITICAL 9.8
Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for me… |
|
CVE-2017-5404
CRITICAL 9.8
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results i… |
|
CVE-2017-5403
CRITICAL 9.8
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, res… |
|
CVE-2017-5402
CRITICAL 9.8
A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This result… |
|
CVE-2017-5401
CRITICAL 9.8
A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vu… |
|
CVE-2017-5400
CRITICAL 9.8
JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vuln… |
|
CVE-2017-5399
CRITICAL 9.8
Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
|
CVE-2017-5398
CRITICAL 9.8
Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some … |
|
CVE-2017-5396
CRITICAL 9.8
A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. Th… |
|
CVE-2017-5390
CRITICAL 9.8
The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers data, allowing for … |
|
CVE-2017-5380
CRITICAL 9.8
A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and… |
|
CVE-2017-5376
CRITICAL 9.8
Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51. |
|
CVE-2017-5375
CRITICAL 9.8
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird <… |
|
CVE-2017-5373
CRITICAL 9.8
Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough … |
|
CVE-2016-9899
CRITICAL 9.8
Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 5… |
|
CVE-2016-9898
CRITICAL 9.8
Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox < 50.1, Firefox ESR … |
|
CVE-2016-9893
CRITICAL 9.8
Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some … |
|
CVE-2016-9063
CRITICAL 9.8
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50. |
|
CVE-2016-5297
CRITICAL 9.8
An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderb… |
|
CVE-2016-5290
CRITICAL 9.8
Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
|
CVE-2018-9373
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-9364
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-9357
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-9356
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-9355
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-9341
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-5854
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-3569
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.