Vulnerabilities

Tracked app vulnerabilities

28,626 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,626
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-30

All CVEs 28,626 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,626 entries

CVE	Severity	KEV	Apps	Published
CVE-2026-74983 HIGH 8.1 2026-08-18 Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, T…	HIGH 8.1	—		2026-08-18
CVE-2026-74982 HIGH 7.5 2026-08-18 Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	HIGH 7.5	—		2026-08-18
CVE-2026-74981 HIGH 8.1 2026-08-18 Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird…	HIGH 8.1	—		2026-08-18
CVE-2026-74979 CRITICAL 9.8 2026-08-18 Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CRITICAL 9.8	—		2026-08-18
CVE-2026-74978 HIGH 8.1 2026-08-18 Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	HIGH 8.1	—		2026-08-18
CVE-2026-74977 HIGH 7.5 2026-08-18 Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	HIGH 7.5	—		2026-08-18
CVE-2026-74976 MEDIUM 6.5 2026-08-18 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154…	MEDIUM 6.5	—		2026-08-18
CVE-2026-74974 MEDIUM 5.4 2026-08-18 Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR…	MEDIUM 5.4	—		2026-08-18
CVE-2026-74973 MEDIUM 4.2 2026-08-18 Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.…	MEDIUM 4.2	—		2026-08-18
CVE-2026-74972 MEDIUM 4.3 2026-08-18 Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbir…	MEDIUM 4.3	—		2026-08-18
CVE-2026-74971 MEDIUM 4.3 2026-08-18 Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Th…	MEDIUM 4.3	—		2026-08-18
CVE-2026-74970 MEDIUM 5.4 2026-08-18 Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	MEDIUM 5.4	—		2026-08-18
CVE-2026-74969 HIGH 8.8 2026-08-18 Race condition, use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Fi…	HIGH 8.8	—		2026-08-18
CVE-2026-74968 MEDIUM 5.4 2026-08-18 Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153…	MEDIUM 5.4	—		2026-08-18
CVE-2026-74967 MEDIUM 5.4 2026-08-18 Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbi…	MEDIUM 5.4	—		2026-08-18
CVE-2026-74966 HIGH 7.5 2026-08-18 Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	HIGH 7.5	—		2026-08-18
CVE-2026-74965 HIGH 8.8 2026-08-18 Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, T…	HIGH 8.8	—		2026-08-18
CVE-2026-74964 CRITICAL 9.8 2026-08-18 Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 14…	CRITICAL 9.8	—		2026-08-18
CVE-2026-74963 MEDIUM 5.4 2026-08-18 Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird…	MEDIUM 5.4	—		2026-08-18
CVE-2026-74962 HIGH 8.1 2026-08-18 Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154,…	HIGH 8.1	—		2026-08-18
CVE-2026-74961 CRITICAL 9.1 2026-08-18 Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CRITICAL 9.1	—		2026-08-18
CVE-2026-74960 HIGH 8.1 2026-08-18 Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thund…	HIGH 8.1	—		2026-08-18
CVE-2026-74959 CRITICAL 9.1 2026-08-18 Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thu…	CRITICAL 9.1	—		2026-08-18
CVE-2026-74958 HIGH 7.5 2026-08-18 Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	HIGH 7.5	—		2026-08-18
CVE-2026-74957 HIGH 8.1 2026-08-18 Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderb…	HIGH 8.1	—		2026-08-18
CVE-2026-74956 CRITICAL 9.1 2026-08-18 Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbi…	CRITICAL 9.1	—		2026-08-18
CVE-2026-74955 HIGH 8.8 2026-08-18 Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	HIGH 8.8	—		2026-08-18
CVE-2026-74954 HIGH 7.5 2026-08-18 Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154…	HIGH 7.5	—		2026-08-18
CVE-2026-74953 HIGH 8.8 2026-08-18 Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154,…	HIGH 8.8	—		2026-08-18
CVE-2026-74952 HIGH 8.8 2026-08-18 Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.…	HIGH 8.8	—		2026-08-18
CVE-2026-74950 HIGH 8.8 2026-08-18 Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	HIGH 8.8	—		2026-08-18
CVE-2026-74949 HIGH 8.8 2026-08-18 Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunde…	HIGH 8.8	—		2026-08-18
CVE-2026-74948 MEDIUM 6.5 2026-08-18 Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thund…	MEDIUM 6.5	—		2026-08-18
CVE-2026-74947 HIGH 8.8 2026-08-18 Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thu…	HIGH 8.8	—		2026-08-18
CVE-2026-74946 HIGH 8.8 2026-08-18 Information disclosure due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 11…	HIGH 8.8	—		2026-08-18
CVE-2026-74945 MEDIUM 6.5 2026-08-18 Information disclosure in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1,…	MEDIUM 6.5	—		2026-08-18
CVE-2026-74944 CRITICAL 9.8 2026-08-18 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderb…	CRITICAL 9.8	—		2026-08-18
CVE-2026-74943 CRITICAL 9.8 2026-08-18 Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thu…	CRITICAL 9.8	—		2026-08-18
CVE-2026-74942 HIGH 8.8 2026-08-18 Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR …	HIGH 8.8	—		2026-08-18
CVE-2026-74941 HIGH 8.8 2026-08-18 Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 15…	HIGH 8.8	—		2026-08-18
CVE-2026-74940 CRITICAL 9.8 2026-08-18 Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunder…	CRITICAL 9.8	—		2026-08-18
CVE-2026-74939 HIGH 8.8 2026-08-18 Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, …	HIGH 8.8	—		2026-08-18
CVE-2026-74938 CRITICAL 9.1 2026-08-18 Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	CRITICAL 9.1	—		2026-08-18
CVE-2026-74937 HIGH 8.8 2026-08-18 Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.	HIGH 8.8	—		2026-08-18
CVE-2026-74936 CRITICAL 9.8 2026-08-18 Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, T…	CRITICAL 9.8	—		2026-08-18
CVE-2026-74935 HIGH 8.8 2026-08-18 Privilege escalation in the DOM: Networking component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, …	HIGH 8.8	—		2026-08-18
CVE-2026-74934 HIGH 7.5 2026-08-18 Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 1…	HIGH 7.5	—		2026-08-18
CVE-2026-65351 MEDIUM 4.3 iOS macOS 2026-08-17 This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1,…	MEDIUM 4.3	—	iOS macOS	2026-08-17
CVE-2026-65349 MEDIUM 6.6 iOS macOS 2026-08-17 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2…	MEDIUM 6.6	—	iOS macOS	2026-08-17
CVE-2026-65347 MEDIUM 6.5 iOS macOS 2026-08-17 The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Proces…	MEDIUM 6.5	—	iOS macOS	2026-08-17

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM