Vulnerabilities

Tracked app vulnerabilities

802 entries

All CVEs 16,158 CISA KEV 285 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2026-21353 CRITICAL 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21352 CRITICAL 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-47392 CRITICAL 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-41615 CRITICAL 9.6 Network 2 apps 2026-05-14 Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.	CRITICAL 9.6	Network	—	2	2026-05-14	Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.
CVE-2026-42831 CRITICAL 7.8 Local 1 apps 2026-05-12 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 7.8	Local	—	1	2026-05-12	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40363 CRITICAL 8.4 Local 1 apps 2026-05-12 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2026-05-12	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-0073 CRITICAL 2026-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-26110 CRITICAL 8.4 Local 1 apps 2026-03-10 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2026-03-10	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-0047 CRITICAL 2026-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-0037 CRITICAL 2026-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-0030 CRITICAL 2026-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-0028 CRITICAL 2026-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-0027 CRITICAL 2026-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-0006 CRITICAL 2026-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48631 CRITICAL 2026-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-62557 CRITICAL 8.4 Local 1 apps 2025-12-09 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2025-12-09	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62554 CRITICAL 8.4 Local 1 apps 2025-12-09 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2025-12-09	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-48638 CRITICAL 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48624 CRITICAL 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48623 CRITICAL 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-47372 CRITICAL 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-47319 CRITICAL 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-60724 CRITICAL 9.8 Network 1 apps 2025-11-11 Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	1	2025-11-11	Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2025-48593 CRITICAL 2025-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-11-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-59234 CRITICAL 7.8 Local 1 apps 2025-10-14 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 7.8	Local	—	1	2025-10-14	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59227 CRITICAL 7.8 Local 1 apps 2025-10-14 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 7.8	Local	—	1	2025-10-14	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53799 CRITICAL 5.5 Local 1 apps 2025-09-09 Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.	CRITICAL 5.5	Local	—	1	2025-09-09	Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
CVE-2025-39682 CRITICAL 9.8 Network 2025-09-05 In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process …	CRITICAL 9.8	Network	—	—	2025-09-05	In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process …
CVE-2025-27034 CRITICAL 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-21483 CRITICAL 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-21450 CRITICAL 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-53766 CRITICAL 9.8 Network 1 apps 2025-08-12 Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.	CRITICAL 9.8	Network	—	1	2025-08-12	Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVE-2025-48530 CRITICAL 2025-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-08-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-21479 CRITICAL KEV 2025-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	KEV	—	2025-08-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-49702 CRITICAL 7.8 Local 1 apps 2025-07-08 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 7.8	Local	—	1	2025-07-08	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49697 CRITICAL 8.4 Local 1 apps 2025-07-08 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2025-07-08	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49696 CRITICAL 8.4 Local 1 apps 2025-07-08 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2025-07-08	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49695 CRITICAL 8.4 Local 1 apps 2025-07-08 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2025-07-08	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47953 CRITICAL 8.4 Local 1 apps 2025-06-10 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2025-06-10	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47167 CRITICAL 8.4 Local 1 apps 2025-06-10 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2025-06-10	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47164 CRITICAL 8.4 Local 1 apps 2025-06-10 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2025-06-10	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-47162 CRITICAL 8.4 Local 1 apps 2025-06-10 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2025-06-10	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-30386 CRITICAL 8.4 Local 1 apps 2025-05-13 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	CRITICAL 8.4	Local	—	1	2025-05-13	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-26416 CRITICAL 2025-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-04-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-22429 CRITICAL 2025-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-04-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-22423 CRITICAL 2025-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-04-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-45551 CRITICAL 2025-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-04-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-22412 CRITICAL 2025-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-22411 CRITICAL 2025-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-22410 CRITICAL 2025-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2025-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.