Vulnérabilités

Vulnérabilités des apps suivies

29 196 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 376 figurent au catalogue CISA KEV, donc leur exploitation est avérée.

CVE correspondantes: 29 196
Activement exploitées: 376
Fenêtre de publication: 1997-01-01 → 2026-11-10

Toutes les CVE 29 196 KEV CISA 376 Exploit public 644 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

29 196 entrées

CVE	Sévérité	KEV	Publié
CVE-2026-117981 CRITICAL 9.8 2026-10-27 Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	CRITICAL 9.8	—	2026-10-27
CVE-2026-117980 CRITICAL 9.8 2026-10-27 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	CRITICAL 9.8	—	2026-10-27
CVE-2026-117979 HIGH 8.8 2026-10-27 Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunder…	HIGH 8.8	—	2026-10-27
CVE-2026-117978 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, a…	HIGH 8.1	—	2026-10-27
CVE-2026-117977 HIGH 8.1 2026-10-27 Other issue in the Console component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117976 HIGH 8.1 2026-10-27 Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117975 HIGH 8.8 2026-10-27 Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 8.8	—	2026-10-27
CVE-2026-117974 HIGH 8.8 2026-10-27 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117973 HIGH 8.8 2026-10-27 Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117972 HIGH 8.8 2026-10-27 Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117971 CRITICAL 9.6 2026-10-27 Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunde…	CRITICAL 9.6	—	2026-10-27
CVE-2026-117970 HIGH 8.8 2026-10-27 Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117969 HIGH 8.8 2026-10-27 Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117968 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117967 HIGH 8.8 2026-10-27 Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117966 HIGH 8.1 2026-10-27 Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	HIGH 8.1	—	2026-10-27
CVE-2026-117965 HIGH 8.1 2026-10-27 Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117964 HIGH 8.8 2026-10-27 Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117963 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thund…	HIGH 8.1	—	2026-10-27
CVE-2026-117962 CRITICAL 9.6 2026-10-27 Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Th…	CRITICAL 9.6	—	2026-10-27
CVE-2026-117961 HIGH 8.1 2026-10-27 Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thu…	HIGH 8.1	—	2026-10-27
CVE-2026-117960 MEDIUM 4.7 2026-10-27 Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 4.7	—	2026-10-27
CVE-2026-117959 HIGH 8.1 2026-10-27 Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	HIGH 8.1	—	2026-10-27
CVE-2026-117958 HIGH 8.1 2026-10-27 Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117957 HIGH 8.1 2026-10-27 Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.1	—	2026-10-27
CVE-2026-117956 HIGH 8.8 2026-10-27 Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117955 HIGH 8.1 2026-10-27 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 1…	HIGH 8.1	—	2026-10-27
CVE-2026-117954 HIGH 8.8 2026-10-27 Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 8.8	—	2026-10-27
CVE-2026-117953 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117952 HIGH 8.1 2026-10-27 Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.1	—	2026-10-27
CVE-2026-117951 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117950 HIGH 8.8 2026-10-27 Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbir…	HIGH 8.8	—	2026-10-27
CVE-2026-117949 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117948 MEDIUM 6.3 2026-10-27 Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117947 MEDIUM 6.3 2026-10-27 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117946 CRITICAL 9.8 2026-10-27 Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbi…	CRITICAL 9.8	—	2026-10-27
CVE-2026-117945 CRITICAL 9.8 2026-10-27 Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	CRITICAL 9.8	—	2026-10-27
CVE-2026-117944 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117943 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117942 HIGH 7.3 2026-10-27 Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thun…	HIGH 7.3	—	2026-10-27
CVE-2026-117941 HIGH 8.8 2026-10-27 Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and…	HIGH 8.8	—	2026-10-27
CVE-2026-117940 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27
CVE-2026-117939 MEDIUM 6.3 2026-10-27 Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	MEDIUM 6.3	—	2026-10-27
CVE-2026-117938 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117937 HIGH 7.3 2026-10-27 Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Th…	HIGH 7.3	—	2026-10-27
CVE-2026-117936 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thun…	HIGH 8.8	—	2026-10-27
CVE-2026-117935 MEDIUM 6.3 2026-10-27 Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117934 MEDIUM 6.3 2026-10-27 Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 15…	MEDIUM 6.3	—	2026-10-27
CVE-2026-117933 MEDIUM 5.4 2026-10-27 Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird …	MEDIUM 5.4	—	2026-10-27
CVE-2026-117932 HIGH 8.8 2026-10-27 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.	HIGH 8.8	—	2026-10-27

Gérez votre parc avec Appaloosa

Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.

Découvrir le MDM Appaloosa