Tidy My Mac
Free tool
Is your version of this Mac app safe? Check for known vulnerabilities
Pick an app and type the version you have. You'll see the security holes its maker has fixed since, how serious they are, whether attackers already use them, and which version to update to.
Latest security fixes for popular Mac apps
| App | Update to at least | Latest advisory | Advisories |
|---|---|---|---|
| Firefox | 159 | High 2026-10-27 | 1 |
| Google Chrome | 156.0.8078.79 | Critical 2026-10-29 | 1 |
| Joplin | 3.7.2 | High 2026-09-09 | 5 |
| KeePassXC | 2.8.0 | Medium 2026-09-23 | 2 |
| Thunderbird | 159 | High 2026-10-27 | 1 |
| Visual Studio Code | 1.141.1 | Critical 2026-10-13 | 7 |
| VLC media player | 3.0.24 | High 2026-09 | 1 |
| Zed | 0.229.0 | High 2026-05-08 | 5 |
Where the list comes from
Every six hours we read the security advisories that app makers publish themselves: Mozilla's for Firefox and Thunderbird, the Chrome Releases blog, VideoLAN's bulletins, and the GitHub security advisories of open-source apps. For each hole we keep the first version of every release branch that fixes it. It is the same list Updates in Tidy My Mac checks your installed apps against, putting security fixes first.
Why old app versions are a risk
Once a fix is out, the hole it fixes is public, and attackers study the fix to attack everyone who hasn't updated yet. Browsers matter most: a hole in Chrome or Firefox can be used by a web page you merely open. An advisory marked “exploited in the wild” means the maker knows attackers are already using it: update that app today.
Keep your apps updated
- Turn on automatic updates in each app's settings, and in System Settings ▸ General ▸ Software Update for macOS and App Store apps.
- Restart browsers now and then: many download updates in the background but only install them on restart.
- Uninstall apps you no longer use, so they don't sit there unpatched.
Questions about app vulnerabilities
Find its version (open the app, then About in the menu named after it), choose it above and type the version. If it's affected, you'll see each security problem and the version that fixes them.
We track apps whose makers publish machine-readable security advisories. An app missing here may still have fixes in its release notes, so keep it updated all the same.
That the app's maker says the hole is already being used in real attacks, not just found by researchers. Update straight away.
Yes. Tidy My Mac's Updates section reads the versions of every installed app, compares them with this list, and puts security fixes at the top.
More free security tools
Website scam checker
Type a site or paste a link: our scam and phishing lists, the domain's age and look-alike names.
Open the tool →Scam message checker
Paste an email, text or DM: the scam signs in it, and its links checked against our lists.
Open the tool →Password checker
Has a password leaked in a data breach, and how long would it take to crack? It never leaves your browser.
Open the tool →Password generator
Random passwords and passphrases, made in your browser with the length and characters you choose.
Open the tool →Email header analyzer
Paste an email's headers: SPF, DKIM and DMARC, the real sender, and where replies would go.
Open the tool →Report a harmful site
Found a phishing page, fake shop or scam site? Report it and we'll review it for our lists.
Open the tool →Do Macs need antivirus? An honest answer for 2026
What macOS already protects you from, what it misses, and who needs more.
Read the guide →How to remove malware from a Mac, step by step
The signs, the places malware hides, and what to do if a password stealer ran.
Read the guide →Scan your Mac for malware, free for 7 days.
Just your email, no credit card. Then $19.99 for your first year, $59.99 a year after that.
Scan your Mac free