Vulnerabilities

Tracked app vulnerabilities

28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,627
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-30

All CVEs 28,627 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,627 entries

CVE	Severity	KEV	Apps	Published
CVE-2026-84125 MEDIUM 5.4 2026-09-01 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.	MEDIUM 5.4	—		2026-09-01
CVE-2026-84124 MEDIUM 5.4 2026-09-01 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderb…	MEDIUM 5.4	—		2026-09-01
CVE-2026-84123 HIGH 8.8 2026-09-01 Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, …	HIGH 8.8	—		2026-09-01
CVE-2026-84122 MEDIUM 5.4 2026-09-01 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 1…	MEDIUM 5.4	—		2026-09-01
CVE-2026-84121 CRITICAL 9.6 2026-09-01 Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firef…	CRITICAL 9.6	—		2026-09-01
CVE-2026-84120 MEDIUM 5.4 2026-09-01 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbir…	MEDIUM 5.4	—		2026-09-01
CVE-2026-84119 CRITICAL 9.6 2026-09-01 Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Fir…	CRITICAL 9.6	—		2026-09-01
CVE-2026-84118 MEDIUM 5.4 2026-09-01 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.	MEDIUM 5.4	—		2026-09-01
CVE-2026-49926 CRITICAL · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2026-09-01
CVE-2026-49913 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-45529 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-45518 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-45517 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-45200 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-45197 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-34194 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-27280 CRITICAL · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2026-09-01
CVE-2026-25260 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-25259 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-24092 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-24091 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-24090 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-24088 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-24087 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-22164 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-21732 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-20504 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-20503 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-20502 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-20501 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-20500 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-0008 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-0001 HIGH · vendor Android 2026-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2026-09-01
CVE-2026-72984 HIGH 8.8 2026-08-28 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.	HIGH 8.8	—		2026-08-28
CVE-2026-66798 MEDIUM 4.3 2026-08-28 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.	MEDIUM 4.3	—		2026-08-28
CVE-2026-66324 MEDIUM 6.5 2026-08-28 External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.	MEDIUM 6.5	—		2026-08-28
CVE-2026-66323 MEDIUM 5.4 2026-08-28 Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.	MEDIUM 5.4	—		2026-08-28
CVE-2026-62904 MEDIUM 5.4 2026-08-28 Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.	MEDIUM 5.4	—		2026-08-28
CVE-2026-58616 MEDIUM 4.4 2026-08-28 Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to d…	MEDIUM 4.4	—		2026-08-28
CVE-2026-82072 HIGH 8.8 2026-08-28 Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page…	HIGH 8.8	—		2026-08-28
CVE-2026-25250 MEDIUM 6.0 Windows 2026-08-27 EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."	MEDIUM 6.0	—	Windows	2026-08-27
CVE-2026-79293 MEDIUM 6.5 2026-08-25 Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chrom…	MEDIUM 6.5	—		2026-08-25
CVE-2026-79292 HIGH 8.3 2026-08-25 Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execut…	HIGH 8.3	—		2026-08-25
CVE-2026-79291 MEDIUM 6.5 2026-08-25 Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium se…	MEDIUM 6.5	—		2026-08-25
CVE-2026-79290 CRITICAL 9.6 2026-08-25 Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.…	CRITICAL 9.6	—		2026-08-25
CVE-2026-79289 LOW 3.1 2026-08-25 Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the render…	LOW 3.1	—		2026-08-25
CVE-2026-79288 MEDIUM 6.5 2026-08-25 Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a cra…	MEDIUM 6.5	—		2026-08-25
CVE-2026-79287 MEDIUM 5.3 2026-08-25 Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chr…	MEDIUM 5.3	—		2026-08-25
CVE-2026-79286 HIGH 7.4 2026-08-25 Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outsid…	HIGH 7.4	—		2026-08-25
CVE-2026-79285 MEDIUM 6.5 2026-08-25 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML …	MEDIUM 6.5	—		2026-08-25

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM