Products › End-user applications
End-user applications
Mail servers and clients, webmail and email filtering gateways.
For example: Exchange, Outlook, Zimbra, Roundcube.
-
16 vulnerabilities added in the last 12 months
-
70 exploited vulnerabilities in the catalog, in total
-
1 added in the last 30 days
Pace of additions
| Period | Vulnerabilities added |
|---|---|
| Sep 4, 2025 to Oct 3, 2025 | 1 |
| Oct 4, 2025 to Nov 2, 2025 | 1 |
| Nov 3, 2025 to Dec 2, 2025 | 0 |
| Dec 3, 2025 to Jan 1, 2026 | 1 |
| Jan 2, 2026 to Jan 31, 2026 | 3 |
| Feb 1, 2026 to Mar 2, 2026 | 4 |
| Mar 3, 2026 to Apr 1, 2026 | 1 |
| Apr 2, 2026 to May 1, 2026 | 2 |
| May 2, 2026 to May 31, 2026 | 1 |
| Jun 1, 2026 to Jun 30, 2026 | 0 |
| Jul 1, 2026 to Jul 30, 2026 | 0 |
| Jul 31, 2026 to Aug 29, 2026 | 1 |
| Aug 30, 2026 to Sep 28, 2026 (in progress) | 1 |
Affected brands
In alphabetical order, with their number of vulnerabilities in this category.
- Barracuda Networks 1 vulnerability
- Cisco 2 vulnerabilities · 2 in the last 12 months
- Exim 5 vulnerabilities
- Libraesva 1 vulnerability · 1 in the last 12 months
- MDaemon 1 vulnerability
- Microsoft 21 vulnerabilities · 2 in the last 12 months
- OpenBSD 1 vulnerability
- Qualitia 1 vulnerability
- Roundcube 11 vulnerabilities · 2 in the last 12 months
- SmarterTools 3 vulnerabilities · 3 in the last 12 months
- SonicWall 3 vulnerabilities
- Symantec 1 vulnerability
- Zimbra (Synacor) 19 vulnerabilities · 6 in the last 12 months
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
See also
- Collaboration, telephony and video conferencing 53 vulnerabilities
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this category.
Rank 1Cisco Secure Email Gateway
CVE-2026-76461Recently addedHunt for compromise (CISA)
Cisco Secure Email Gateway SQL Injection Vulnerability
Added to the catalog less than 30 days ago: ranked by date added.
- Added
- Sep 14, 2026
- CISA deadline
- 3 days
- CVSS severity
- 9.8 (critical)
Rank 2SmarterTools SmarterMail
CVE-2025-52691Ransomware
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jan 26, 2026
- CISA deadline
- 21 days
- CVSS severity
- 10.0 (critical)
Rank 3Cisco Secure Email Gateway
CVE-2025-20393Cisco Multiple Products Improper Input Validation Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Dec 17, 2025
- CISA deadline
- 7 days
- CVSS severity
- 10.0 (critical)
Rank 4Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2020-7796CVE from 2020, added in 2026
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Feb 17, 2026
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 5SmarterTools SmarterMail
CVE-2026-24423Ransomware
SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Feb 5, 2026
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 6SmarterTools SmarterMail
CVE-2026-23760Ransomware
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jan 26, 2026
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 7Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2026-73570Hunt for compromise (CISA)
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Aug 21, 2026
- CISA deadline
- 3 days
- CVSS severity
- 8.9 (high)
Rank 8Microsoft Exchange Server
CVE-2023-21529RansomwareCVE from 2023, added in 2026
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Apr 13, 2026
- CISA deadline
- 14 days
- CVSS severity
- 8.8 (high)
Rank 9Roundcube Webmail
CVE-2025-49113RoundCube Webmail Deserialization of Untrusted Data Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Feb 20, 2026
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 10Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2025-68645Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jan 22, 2026
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Show 60 more vulnerabilities
Rank 11Microsoft Exchange Server
CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- May 15, 2026
- CISA deadline
- 14 days
- CVSS severity
- 6.1 (medium)
Rank 12Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Apr 20, 2026
- CISA deadline
- 3 days
- CVSS severity
- 6.1 (medium)
Rank 13Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Mar 18, 2026
- CISA deadline
- 14 days
- CVSS severity
- 6.1 (medium)
Rank 14Roundcube Webmail
CVE-2025-68461RoundCube Webmail Cross-site Scripting Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Feb 20, 2026
- CISA deadline
- 21 days
- CVSS severity
- 6.1 (medium)
Rank 15Libraesva Email Security Gateway
CVE-2025-59689Libraesva Email Security Gateway Command Injection Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Sep 29, 2025
- CISA deadline
- 21 days
- CVSS severity
- 6.1 (medium)
Rank 16Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Oct 7, 2025
- CISA deadline
- 21 days
- CVSS severity
- 5.4 (medium)
Rank 17Qualitia Active! Mail
CVE-2025-42599Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Apr 28, 2025
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 18Microsoft Outlook
CVE-2024-21413Microsoft Outlook Improper Input Validation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Feb 6, 2025
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 19Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2024-45519Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Oct 3, 2024
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 20Microsoft Exchange Server
CVE-2024-21410Microsoft Exchange Server Privilege Escalation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Feb 15, 2024
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 21Roundcube Webmail
CVE-2020-12641CVE from 2020, added in 2023
Roundcube Webmail Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jun 22, 2023
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 22Roundcube Webmail
CVE-2021-44026CVE from 2021, added in 2023
Roundcube Webmail SQL Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jun 22, 2023
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 23Barracuda Networks Email Security Gateway (ESG)
CVE-2023-2868Barracuda Networks ESG Appliance Improper Input Validation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- May 26, 2023
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 24Microsoft Exchange Server
CVE-2022-41080Ransomware
Microsoft Exchange Server Privilege Escalation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jan 10, 2023
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 25Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2022-41352Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Oct 20, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 26Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2022-37042Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Aug 11, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 27Exim
CVE-2010-4344CVE from 2010, added in 2022
Exim Heap-Based Buffer Overflow Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 28OpenBSD OpenSMTPD
CVE-2020-7247CVE from 2020, added in 2022
OpenSMTPD Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 29Exim
CVE-2019-16928CVE from 2019, added in 2022
Exim Out-of-bounds Write Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 9.8 (critical)
Rank 30Exim
CVE-2019-10149CVE from 2019, added in 2022
Exim Mail Transfer Agent (MTA) Improper Input Validation
Added more than a year ago: ranked by severity.
- Added
- Jan 10, 2022
- CISA deadline
- 181 days
- CVSS severity
- 9.8 (critical)
Rank 31Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2019-9670CVE from 2019, added in 2022
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
Added more than a year ago: ranked by severity.
- Added
- Jan 10, 2022
- CISA deadline
- 181 days
- CVSS severity
- 9.8 (critical)
Rank 32Exim
CVE-2018-6789RansomwareCVE from 2018, added in 2021
Exim Buffer Overflow Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 9.8 (critical)
Rank 33SonicWall Email Security
CVE-2021-20021Ransomware
SonicWall Email Security Improper Privilege Management Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 14 days
- CVSS severity
- 9.8 (critical)
Rank 34Microsoft Exchange Server
CVE-2021-26855Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 9.8 (critical)
Rank 35Microsoft Exchange Server
CVE-2021-34473Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 14 days
- CVSS severity
- 9.8 (critical)
Rank 36Microsoft Exchange Server
CVE-2021-34523Ransomware
Microsoft Exchange Server Privilege Escalation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 14 days
- CVSS severity
- 9.8 (critical)
Rank 37Roundcube Webmail
CVE-2024-42009RoundCube Webmail Cross-Site Scripting Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jun 9, 2025
- CISA deadline
- 21 days
- CVSS severity
- 9.3 (critical)
Rank 38Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2023-34192CVE from 2023, added in 2025
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Feb 25, 2025
- CISA deadline
- 21 days
- CVSS severity
- 9.0 (critical)
Rank 39Microsoft Exchange Server
CVE-2022-41040Ransomware
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Sep 30, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Rank 40Microsoft Exchange Server
CVE-2021-42321Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 17, 2021
- CISA deadline
- 14 days
- CVSS severity
- 8.8 (high)
Rank 41Symantec Messaging Gateway
CVE-2017-6327CVE from 2017, added in 2021
Symantec Messaging Gateway Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 8.8 (high)
Rank 42Microsoft Exchange Server
CVE-2020-0688Ransomware
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 8.8 (high)
Rank 43Microsoft Exchange Server
CVE-2020-17144Microsoft Exchange Server Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 8.8 (high)
Rank 44Microsoft Exchange Server
CVE-2022-41082Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Sep 30, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.0 (high)
Rank 45Exim
CVE-2010-4345CVE from 2010, added in 2022
Exim Privilege Escalation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 7.8 (high)
Rank 46Roundcube Webmail
CVE-2017-16651CVE from 2017, added in 2021
Roundcube Webmail File Disclosure Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 7.8 (high)
Rank 47Microsoft Exchange Server
CVE-2021-26857Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 7.8 (high)
Rank 48Microsoft Exchange Server
CVE-2021-26858Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 7.8 (high)
Rank 49Microsoft Exchange Server
CVE-2021-27065Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 7.8 (high)
Rank 50Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2019-9621CVE from 2019, added in 2025
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jul 7, 2025
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 51Microsoft Outlook
CVE-2023-35311Microsoft Outlook Security Feature Bypass Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jul 11, 2023
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 52Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2022-27924Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Aug 4, 2022
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Rank 53Microsoft Exchange Server
CVE-2021-33766Microsoft Exchange Server Information Disclosure
Added more than a year ago: ranked by severity.
- Added
- Jan 18, 2022
- CISA deadline
- 14 days
- CVSS severity
- 7.5 (high)
Rank 54Microsoft Exchange Server
CVE-2018-8581RansomwareCVE from 2018, added in 2022
Microsoft Exchange Server Privilege Escalation Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 3, 2022
- CISA deadline
- 14 days
- CVSS severity
- 7.4 (high)
Rank 55Microsoft Exchange Server
CVE-2021-31196CVE from 2021, added in 2024
Microsoft Exchange Server Information Disclosure Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Aug 21, 2024
- CISA deadline
- 21 days
- CVSS severity
- 7.2 (high)
Rank 56Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2022-27925Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Aug 11, 2022
- CISA deadline
- 21 days
- CVSS severity
- 7.2 (high)
Rank 57SonicWall Email Security
CVE-2021-20022Ransomware
SonicWall Email Security Unrestricted Upload of File Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 14 days
- CVSS severity
- 7.2 (high)
Rank 58Microsoft Exchange Server
CVE-2021-31207Ransomware
Microsoft Exchange Server Security Feature Bypass Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 14 days
- CVSS severity
- 6.6 (medium)
Rank 59MDaemon Email Server
CVE-2024-11182MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- May 19, 2025
- CISA deadline
- 21 days
- CVSS severity
- 6.1 (medium)
Rank 60Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2024-27443Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- May 19, 2025
- CISA deadline
- 21 days
- CVSS severity
- 6.1 (medium)
Rank 61Roundcube Webmail
CVE-2024-37383RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Oct 24, 2024
- CISA deadline
- 21 days
- CVSS severity
- 6.1 (medium)
Rank 62Roundcube Webmail
CVE-2020-13965CVE from 2020, added in 2024
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jun 26, 2024
- CISA deadline
- 21 days
- CVSS severity
- 6.1 (medium)
Rank 63Roundcube Webmail
CVE-2023-43770Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Feb 12, 2024
- CISA deadline
- 21 days
- CVSS severity
- 6.1 (medium)
Rank 64Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2023-37580Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jul 27, 2023
- CISA deadline
- 21 days
- CVSS severity
- 6.1 (medium)
Rank 65Roundcube Webmail
CVE-2020-35730CVE from 2020, added in 2023
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jun 22, 2023
- CISA deadline
- 21 days
- CVSS severity
- 6.1 (medium)
Rank 66Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2022-27926Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Apr 3, 2023
- CISA deadline
- 21 days
- CVSS severity
- 6.1 (medium)
Rank 67Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2018-6882RansomwareCVE from 2018, added in 2022
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Apr 19, 2022
- CISA deadline
- 21 days
- CVSS severity
- 6.1 (medium)
Rank 68Zimbra (Synacor) Collaboration Suite (ZCS)
CVE-2022-24682Ransomware
Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Feb 25, 2022
- CISA deadline
- 14 days
- CVSS severity
- 6.1 (medium)
Rank 69Roundcube Webmail
CVE-2023-5631Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Oct 26, 2023
- CISA deadline
- 21 days
- CVSS severity
- 5.4 (medium)
Rank 70SonicWall Email Security
CVE-2021-20023Ransomware
SonicWall Email Security Path Traversal Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 14 days
- CVSS severity
- 4.9 (medium)
Filed under another category
These 9 vulnerabilities also concern this type of product, but are counted in their main category. My radar finds them when you follow this category.
Mozilla Firefox
CVE-2010-3765CVE from 2010, added in 2025
Mozilla Multiple Products Remote Code Execution Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Oct 6, 2025
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Mozilla Firefox
CVE-2019-11708CVE from 2019, added in 2022
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
Added more than a year ago: ranked by severity.
- Added
- May 23, 2022
- CISA deadline
- 21 days
- CVSS severity
- 10.0 (critical)
Fortinet FortiVoice / FortiFone
CVE-2025-32756Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
Added more than a year ago: ranked by severity.
- Added
- May 14, 2025
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Mozilla Firefox
CVE-2019-11707CVE from 2019, added in 2022
Mozilla Firefox and Thunderbird Type Confusion Vulnerability
Added more than a year ago: ranked by severity.
- Added
- May 23, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Mozilla Firefox
CVE-2013-1690CVE from 2013, added in 2022
Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 28, 2022
- CISA deadline
- 21 days
- CVSS severity
- 8.8 (high)
Show 4 more vulnerabilities
Mozilla Firefox
CVE-2019-17026CVE from 2019, added in 2021
Mozilla Firefox And Thunderbird Type Confusion Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 8.8 (high)
Mozilla Firefox
CVE-2020-6819Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 8.1 (high)
Mozilla Firefox
CVE-2020-6820Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 8.1 (high)
Mozilla Firefox
CVE-2016-9079CVE from 2016, added in 2023
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Jun 22, 2023
- CISA deadline
- 21 days
- CVSS severity
- 7.5 (high)
Follow and verify
Get new vulnerabilities in this category: RSS feed (add it to Outlook, Teams, Slack or your feed reader).
Indicative classification, based on the vendor and product names given by CISA. How products are classified.