Vulnerabilities

Tracked app vulnerabilities

18,015 CVEs affect a tracked app or OS (all severities, Windows). 302 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 18,015
Actively exploited: 302
Publication window: 1997-01-01 → 2026-10-06

All CVEs 18,015 CISA KEV 302 Public exploit 562 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,015 entries Windows Clear all

CVE	Severity	KEV	Published
CVE-2026-100832 HIGH 8.8 2026-09-29 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.4…	HIGH 8.8	—	2026-09-29
CVE-2026-100831 HIGH 8.8 2026-09-29 Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Fir…	HIGH 8.8	—	2026-09-29
CVE-2026-100830 HIGH 8.1 2026-09-29 Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.1	—	2026-09-29
CVE-2026-100829 CRITICAL 9.6 2026-09-29 Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	CRITICAL 9.6	—	2026-09-29
CVE-2026-100828 CRITICAL 9.6 2026-09-29 Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	CRITICAL 9.6	—	2026-09-29
CVE-2026-100826 MEDIUM 6.5 2026-09-29 Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox …	MEDIUM 6.5	—	2026-09-29
CVE-2026-100825 HIGH 8.8 2026-09-29 Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100824 HIGH 8.8 2026-09-29 Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100822 MEDIUM 5.4 2026-09-29 Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	MEDIUM 5.4	—	2026-09-29
CVE-2026-100821 MEDIUM 4.7 2026-09-29 Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird …	MEDIUM 4.7	—	2026-09-29
CVE-2026-100820 HIGH 8.8 2026-09-29 Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F…	HIGH 8.8	—	2026-09-29
CVE-2026-100819 CRITICAL 9.6 2026-09-29 Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100818 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thun…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100817 MEDIUM 5.4 2026-09-29 Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 5.4	—	2026-09-29
CVE-2026-100816 HIGH 8.1 2026-09-29 Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.1	—	2026-09-29
CVE-2026-100815 HIGH 8.8 2026-09-29 Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox…	HIGH 8.8	—	2026-09-29
CVE-2026-100814 HIGH 8.8 2026-09-29 Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, a…	HIGH 8.8	—	2026-09-29
CVE-2026-100813 HIGH 8.8 2026-09-29 Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100812 MEDIUM 6.5 2026-09-29 Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	MEDIUM 6.5	—	2026-09-29
CVE-2026-100811 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17,…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100810 CRITICAL 9.8 2026-09-29 Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	CRITICAL 9.8	—	2026-09-29
CVE-2026-100809 HIGH 8.1 2026-09-29 Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.1	—	2026-09-29
CVE-2026-100808 HIGH 8.8 2026-09-29 Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100807 HIGH 8.8 2026-09-29 Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird…	HIGH 8.8	—	2026-09-29
CVE-2026-100806 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	MEDIUM 4.3	—	2026-09-29
CVE-2026-100805 HIGH 7.5 2026-09-29 Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	HIGH 7.5	—	2026-09-29
CVE-2026-100804 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	CRITICAL 9.6	—	2026-09-29
CVE-2026-100803 HIGH 8.1 2026-09-29 Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 1…	HIGH 8.1	—	2026-09-29
CVE-2026-100802 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 4.3	—	2026-09-29
CVE-2026-100801 HIGH 8.8 2026-09-29 Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, …	HIGH 8.8	—	2026-09-29
CVE-2026-100800 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 1…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100799 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 4.3	—	2026-09-29
CVE-2026-100798 HIGH 8.1 2026-09-29 Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	HIGH 8.1	—	2026-09-29
CVE-2026-100797 HIGH 8.8 2026-09-29 Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbir…	HIGH 8.8	—	2026-09-29
CVE-2026-100796 HIGH 8.8 2026-09-29 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	HIGH 8.8	—	2026-09-29
CVE-2026-100795 MEDIUM 6.5 2026-09-29 Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 6.5	—	2026-09-29
CVE-2026-100794 CRITICAL 9.6 2026-09-29 Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, …	CRITICAL 9.6	—	2026-09-29
CVE-2026-100793 MEDIUM 6.5 2026-09-29 JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.	MEDIUM 6.5	—	2026-09-29
CVE-2026-100792 HIGH 7.1 2026-09-29 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbir…	HIGH 7.1	—	2026-09-29
CVE-2026-100791 HIGH 8.8 2026-09-29 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi…	HIGH 8.8	—	2026-09-29
CVE-2026-100790 HIGH 8.8 2026-09-29 Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, F…	HIGH 8.8	—	2026-09-29
CVE-2026-100789 HIGH 8.8 2026-09-29 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, …	HIGH 8.8	—	2026-09-29
CVE-2026-100788 CRITICAL 9.8 2026-09-29 Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 1…	CRITICAL 9.8	—	2026-09-29
CVE-2026-100787 CRITICAL 9.6 2026-09-29 Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.	CRITICAL 9.6	—	2026-09-29
CVE-2026-100786 CRITICAL 9.6 2026-09-29 Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunder…	CRITICAL 9.6	—	2026-09-29
CVE-2026-100785 HIGH 8.8 2026-09-29 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fi…	HIGH 8.8	—	2026-09-29
CVE-2026-100784 HIGH 8.8 2026-09-29 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153…	HIGH 8.8	—	2026-09-29
CVE-2026-100783 MEDIUM 4.3 2026-09-29 Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, F…	MEDIUM 4.3	—	2026-09-29
CVE-2026-100782 HIGH 8.8 2026-09-29 Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunde…	HIGH 8.8	—	2026-09-29
CVE-2026-100781 CRITICAL 9.6 2026-09-29 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, T…	CRITICAL 9.6	—	2026-09-29

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM