Vulnerabilities

Tracked app vulnerabilities

639 CVEs affect a tracked app or OS (all severities, all platforms). 373 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 639
Actively exploited: 373
Publication window: 1999-11-11 → 2026-05-04

All CVEs 26,416 CISA KEV 373 Public exploit 639 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

639 entries Public exploit Clear all

CVE	Severity	KEV	Apps	Published
CVE-2019-0568 HIGH 7.5 Microsoft Edge 2019-01-08 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2019-01-08
CVE-2019-0567 HIGH 7.5 Microsoft Edge 2019-01-08 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2019-01-08
CVE-2019-0566 HIGH 8.8 Microsoft Edge 2019-01-08 An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulnerability." This aff…	HIGH 8.8	—	Microsoft Edge	2019-01-08
CVE-2019-0539 HIGH 7.5 Microsoft Edge 2019-01-08 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2019-01-08
CVE-2019-0574 HIGH · vendor Windows 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0573 HIGH · vendor Windows 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0572 HIGH · vendor Windows 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0571 HIGH · vendor Windows 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0570 HIGH · vendor Windows 2019-01-08 Windows Runtime Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0555 HIGH · vendor Windows 2019-01-08 Microsoft XmlDocument Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0552 HIGH · vendor Windows 2019-01-08 Windows COM Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0543 HIGH · vendor KEV Windows 2019-01-08 Microsoft Windows Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2019-01-08
CVE-2018-17182 HIGH · vendor Android 2019-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2019-01-01
CVE-2018-13405 HIGH · vendor Android 2019-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2019-01-01
CVE-2018-8617 HIGH 7.5 Microsoft Edge 2018-12-12 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-12-12
CVE-2018-6092 HIGH 8.8 2018-12-04 An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandb…	HIGH 8.8	—		2018-12-04
CVE-2018-6065 HIGH 8.8 2018-11-14 Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a r…	HIGH 8.8	—		2018-11-14
CVE-2018-6064 HIGH 8.8 2018-11-14 Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap co…	HIGH 8.8	—		2018-11-14
CVE-2018-17463 HIGH 8.8 2018-11-14 Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafte…	HIGH 8.8	—		2018-11-14
CVE-2018-8584 HIGH · vendor Windows 2018-11-13 Windows ALPC Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-11-13
CVE-2018-8550 HIGH · vendor Windows 2018-11-13 Windows COM Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-11-13
CVE-2018-8544 CRITICAL · vendor Windows 2018-11-13 Windows VBScript Engine Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-11-13
CVE-2018-8453 HIGH 7.8 KEV Windows 2018-10-10 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…	HIGH 7.8	KEV	Windows	2018-10-10
CVE-2018-8413 HIGH · vendor Windows 2018-10-09 Windows Theme API Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8411 HIGH · vendor Windows 2018-10-09 NTFS Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-17456 CRITICAL 9.8 Git 2018-10-06 Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code executio…	CRITICAL 9.8	—	Git	2018-10-06
CVE-2018-13042 MEDIUM 5.9 1Password 2018-10-05 The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity com.agilebits.onepassword.filling.openyolo…	MEDIUM 5.9	—	1Password	2018-10-05
CVE-2018-9515 HIGH · vendor Android 2018-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2018-10-01
CVE-2018-8469 HIGH 7.4 Microsoft Edge 2018-09-13 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 7.4	—	Microsoft Edge	2018-09-13
CVE-2018-8467 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8466 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8463 HIGH 7.4 Microsoft Edge 2018-09-13 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 7.4	—	Microsoft Edge	2018-09-13
CVE-2018-8468 HIGH · vendor Windows 2018-09-11 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8449 HIGH · vendor Windows 2018-09-11 Device Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8410 HIGH · vendor Windows 2018-09-11 Windows Registry Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-9488 MEDIUM · vendor Android 2018-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2018-09-01
CVE-2018-8355 HIGH 7.5 Microsoft Edge 2018-08-15 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-08-15
CVE-2018-0952 HIGH · vendor Windows 2018-08-14 Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-08-14
CVE-2018-9445 HIGH · vendor Android 2018-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2018-08-01
CVE-2018-8291 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8288 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8279 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8229 HIGH 7.5 Microsoft Edge 2018-06-14 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-06-14
CVE-2018-8214 HIGH · vendor Windows 2018-06-12 Windows Desktop Bridge Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-06-12
CVE-2018-8208 HIGH · vendor Windows 2018-06-12 Windows Desktop Bridge Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-06-12
CVE-2018-0982 HIGH · vendor Windows 2018-06-12 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-06-12
CVE-2018-5159 CRITICAL 9.8 2018-06-11 An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds wr…	CRITICAL 9.8	—		2018-06-11
CVE-2017-5465 CRITICAL 9.1 2018-06-11 An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied i…	CRITICAL 9.1	—		2018-06-11
CVE-2017-5447 CRITICAL 9.1 2018-06-11 An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to …	CRITICAL 9.1	—		2018-06-11
CVE-2017-5404 CRITICAL 9.8 2018-06-11 A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results i…	CRITICAL 9.8	—		2018-06-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM