Vulnerabilities

Tracked app vulnerabilities

11,354 entries

All CVEs 16,390 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2026-43723 HIGH 7.8 Local 2026-07-27 A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS…	HIGH 7.8	Local	—	—	2026-07-27	A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS…
CVE-2026-43711 HIGH 7.8 Local 2026-07-27 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8…	HIGH 7.8	Local	—	—	2026-07-27	A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8…
CVE-2026-43698 HIGH 7.8 Local 2026-07-27 An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to gain root pr…	HIGH 7.8	Local	—	—	2026-07-27	An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to gain root pr…
CVE-2026-43693 HIGH 7.0 Local 2026-07-27 A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be …	HIGH 7.0	Local	—	—	2026-07-27	A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be …
CVE-2026-43681 HIGH 7.1 Local 2026-07-27 A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A local user…	HIGH 7.1	Local	—	—	2026-07-27	A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A local user…
CVE-2026-43673 HIGH 7.8 Local 2026-07-27 The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe …	HIGH 7.8	Local	—	—	2026-07-27	The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe …
CVE-2026-43672 HIGH 7.1 Local 2026-07-27 An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A mali…	HIGH 7.1	Local	—	—	2026-07-27	An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A mali…
CVE-2026-39877 HIGH 7.8 Local 2026-07-27 A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to …	HIGH 7.8	Local	—	—	2026-07-27	A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to …
CVE-2026-39875 HIGH 7.8 Local 2026-07-27 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious…	HIGH 7.8	Local	—	—	2026-07-27	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious…
CVE-2026-39874 HIGH 7.8 Local 2026-07-27 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious…	HIGH 7.8	Local	—	—	2026-07-27	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious…
CVE-2026-28981 HIGH 7.8 Local 2026-07-27 A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a…	HIGH 7.8	Local	—	—	2026-07-27	A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a…
CVE-2026-28973 HIGH 8.6 Local 2026-07-27 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, m…	HIGH 8.6	Local	—	—	2026-07-27	An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, m…
CVE-2026-28945 HIGH 7.1 Local 2026-07-27 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An …	HIGH 7.1	Local	—	—	2026-07-27	A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An …
CVE-2026-28931 HIGH 8.8 Network 2026-07-27 A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Conn…	HIGH 8.8	Network	—	—	2026-07-27	A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Conn…
CVE-2026-28926 HIGH 7.0 Local 2026-07-27 A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to elevate pr…	HIGH 7.0	Local	—	—	2026-07-27	A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to elevate pr…
CVE-2026-28912 HIGH 7.8 Local 2026-07-27 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A user may be able to elevate privileges.	HIGH 7.8	Local	—	—	2026-07-27	A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A user may be able to elevate privileges.
CVE-2026-28896 HIGH 7.7 Local 2026-07-27 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An attacker may be able to cause unexp…	HIGH 7.7	Local	—	—	2026-07-27	The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An attacker may be able to cause unexp…
CVE-2026-14899 HIGH 7.5 Network 1 apps 2026-07-22 The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a singl…	HIGH 7.5	Network	—	1	2026-07-22	The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a singl…
CVE-2026-16409 HIGH 7.5 Network 1 apps 2026-07-21 Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16401 HIGH 8.8 Network 1 apps 2026-07-21 Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 8.8	Network	—	1	2026-07-21	Privilege escalation in the Data Loss Prevention component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16400 HIGH 7.5 Network 1 apps 2026-07-21 Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16399 HIGH 7.5 Network 1 apps 2026-07-21 Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16398 HIGH 7.5 Network 1 apps 2026-07-21 Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16396 HIGH 8.8 Network 1 apps 2026-07-21 Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	HIGH 8.8	Network	—	1	2026-07-21	Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16391 HIGH 7.5 Network 1 apps 2026-07-21 Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 1…	HIGH 7.5	Network	—	1	2026-07-21	Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 1…
CVE-2026-16386 HIGH 7.5 Network 1 apps 2026-07-21 Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16385 HIGH 7.5 Network 1 apps 2026-07-21 Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16384 HIGH 7.5 Network 1 apps 2026-07-21 Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16379 HIGH 8.8 Network 1 apps 2026-07-21 Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird…	HIGH 8.8	Network	—	1	2026-07-21	Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird…
CVE-2026-16378 HIGH 7.5 Network 1 apps 2026-07-21 Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16376 HIGH 7.5 Network 1 apps 2026-07-21 Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 7.5	Network	—	1	2026-07-21	Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16374 HIGH 7.5 Network 1 apps 2026-07-21 Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbir…	HIGH 7.5	Network	—	1	2026-07-21	Information disclosure in the Framework component in DevTools. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbir…
CVE-2026-16372 HIGH 8.8 Network 1 apps 2026-07-21 Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 8.8	Network	—	1	2026-07-21	Privilege escalation in the DOM: Content Processes component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16371 HIGH 8.8 Network 1 apps 2026-07-21 Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	HIGH 8.8	Network	—	1	2026-07-21	Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16366 HIGH 8.8 Network 1 apps 2026-07-21 Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 8.8	Network	—	1	2026-07-21	Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16365 HIGH 8.8 Network 1 apps 2026-07-21 Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.	HIGH 8.8	Network	—	1	2026-07-21	Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
CVE-2026-16362 HIGH 8.8 Network 1 apps 2026-07-21 Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.	HIGH 8.8	Network	—	1	2026-07-21	Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
CVE-2026-16354 HIGH 7.5 Network 1 apps 2026-07-21 Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 15…	HIGH 7.5	Network	—	1	2026-07-21	Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 15…
CVE-2026-58598 HIGH 7.0 Local 2026-07-16 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate p…	HIGH 7.0	Local	—	—	2026-07-16	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate p…
CVE-2026-58637 HIGH 7.0 Local 2026-07-14 Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.	HIGH 7.0	Local	—	—	2026-07-14	Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-58634 HIGH 7.8 Local 2026-07-14 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.	HIGH 7.8	Local	—	—	2026-07-14	Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-58633 HIGH 7.8 Local 2026-07-14 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.	HIGH 7.8	Local	—	—	2026-07-14	Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-58632 HIGH 7.8 Local 2026-07-14 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.	HIGH 7.8	Local	—	—	2026-07-14	Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-58629 HIGH 7.0 Local 2026-07-14 Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.	HIGH 7.0	Local	—	—	2026-07-14	Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
CVE-2026-58628 HIGH 7.8 Local 2026-07-14 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to ele…	HIGH 7.8	Local	—	—	2026-07-14	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to ele…
CVE-2026-58627 HIGH 7.5 Network 2026-07-14 Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.	HIGH 7.5	Network	—	—	2026-07-14	Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-58626 HIGH 8.8 Network 2026-07-14 Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.	HIGH 8.8	Network	—	—	2026-07-14	Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-58619 HIGH 7.0 Local 2026-07-14 Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.	HIGH 7.0	Local	—	—	2026-07-14	Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
CVE-2026-58613 HIGH 7.8 Local 2026-07-14 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.	HIGH 7.8	Local	—	—	2026-07-14	Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-58594 HIGH 8.8 Network 2026-07-14 Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.	HIGH 8.8	Network	—	—	2026-07-14	Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.