Vulnerabilities

Tracked app vulnerabilities

6,074 entries

All CVEs 16,390 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2025-20726 HIGH 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-20725 HIGH 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-11133 HIGH 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-11132 HIGH 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-11131 HIGH 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-35970 HIGH 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40130 HIGH 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-60724 CRITICAL 9.8 Network 1 apps 2025-11-11 Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	1	2025-11-11	Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2025-60722 MEDIUM 6.5 Network 1 apps 2025-11-11 Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over…	MEDIUM 6.5	Network	—	1	2025-11-11	Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over…
CVE-2025-65018 HIGH 7.1 2025-11-11 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`	HIGH 7.1	—	—	—	2025-11-11	LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
CVE-2025-64720 HIGH 7.1 2025-11-11 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication	HIGH 7.1	—	—	—	2025-11-11	LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
CVE-2025-48593 CRITICAL 2025-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-11-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-59234 CRITICAL 7.8 Local 1 apps 2025-10-14 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 7.8	Local	—	1	2025-10-14	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59227 CRITICAL 7.8 Local 1 apps 2025-10-14 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 7.8	Local	—	1	2025-10-14	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47967 MEDIUM 4.7 Network 1 apps 2025-09-16 Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.	MEDIUM 4.7	Network	—	1	2025-09-16	Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-53799 CRITICAL 5.5 Local 1 apps 2025-09-09 Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.	CRITICAL 5.5	Local	—	1	2025-09-09	Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
CVE-2025-39682 CRITICAL 9.8 Network 2025-09-05 In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process …	CRITICAL 9.8	Network	—	—	2025-09-05	In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process …
CVE-2025-48581 HIGH 8.4 Local 2025-09-04 In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalat…	HIGH 8.4	Local	—	—	2025-09-04	In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalat…
CVE-2025-56139 MEDIUM 5.3 Network 1 apps 2025-09-03 LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original …	MEDIUM 5.3	Network	—	1	2025-09-03	LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original …
CVE-2025-8109 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48563 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48562 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48560 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48559 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48558 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48556 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48554 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48553 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48552 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48551 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48550 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48549 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48548 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48547 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48546 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48545 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48543 HIGH KEV 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48542 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48541 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48540 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48539 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48538 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48537 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48535 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48534 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48532 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48531 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48529 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48528 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48527 HIGH 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.