Vulnerabilities

Tracked app vulnerabilities

404 CVEs affect a tracked app or OS (High, all platforms). 294 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 404
Actively exploited: 294
Publication window: 2009-10-13 → 2026-05-04

All CVEs 15,822 CISA KEV 294 Public exploit 404 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

404 entries High Public exploit Clear all

CVE	Severity	KEV	Apps	Published
CVE-2017-0285 HIGH · vendor Windows 2017-06-13 Windows Uniscribe Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0284 HIGH · vendor Windows 2017-06-13 Windows Uniscribe Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0282 HIGH · vendor Windows 2017-06-13 Windows Uniscribe Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0263 HIGH · vendor KEV Windows 2017-05-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2017-05-09
CVE-2017-0259 HIGH · vendor Windows 2017-05-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0258 HIGH · vendor Windows 2017-05-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0214 HIGH · vendor Windows 2017-05-09 Windows COM Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0213 HIGH · vendor KEV Windows 2017-05-09 Windows COM Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2017-05-09
CVE-2017-0211 HIGH · vendor Windows 2017-04-11 Windows OLE Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0167 HIGH · vendor Windows 2017-04-11 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0165 HIGH · vendor Windows 2017-04-11 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0058 HIGH · vendor Windows 2017-04-11 Win32k Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0569 HIGH · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-04-01
CVE-2017-0145 HIGH 8.8 KEV Windows 2017-03-17 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…	HIGH 8.8	KEV	Windows	2017-03-17
CVE-2017-0144 HIGH 8.8 KEV Windows 2017-03-17 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…	HIGH 8.8	KEV	Windows	2017-03-17
CVE-2017-0070 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0147 HIGH · vendor KEV Windows 2017-03-14 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	KEV	Windows	2017-03-14
CVE-2017-0121 HIGH · vendor Windows 2017-03-14 Windows Uniscribe Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-03-14
CVE-2017-0118 HIGH · vendor Windows 2017-03-14 Windows Uniscribe Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-03-14
CVE-2017-0100 HIGH · vendor Windows 2017-03-14 Windows COM Session Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-03-14
CVE-2017-0063 HIGH · vendor Windows 2017-03-14 Microsoft Color Management Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-03-14
CVE-2017-0062 HIGH · vendor Windows 2017-03-14 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-03-14
CVE-2017-0060 HIGH · vendor Windows 2017-03-14 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-03-14
CVE-2017-0038 HIGH · vendor Windows 2017-03-14 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-03-14
CVE-2016-9793 HIGH · vendor Android 2017-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-03-01
CVE-2016-8655 HIGH · vendor Android 2017-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-03-01
CVE-2017-0037 HIGH 8.1 KEV Microsoft Edge 2017-02-26 Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningEle…	HIGH 8.1	KEV	Microsoft Edge	2017-02-26
CVE-2017-0412 HIGH · vendor Android 2017-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-02-01
CVE-2017-0411 HIGH · vendor Android 2017-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-02-01
CVE-2016-7288 HIGH 7.5 Microsoft Edge 2016-12-20 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2016-7287 HIGH 7.5 Microsoft Edge 2016-12-20 The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memor…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2016-7286 HIGH 7.5 Microsoft Edge 2016-12-20 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2014-4014 HIGH · vendor Android 2016-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-12-01
CVE-2016-7255 HIGH 7.8 KEV Windows 2016-11-10 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window…	HIGH 7.8	KEV	Windows	2016-11-10
CVE-2016-7241 HIGH 7.5 Microsoft Edge 2016-11-10 Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7240 HIGH 7.5 Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7203 HIGH 7.5 Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7202 HIGH 7.5 Microsoft Edge 2016-11-10 The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of serv…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7201 HIGH 8.8 KEV Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 8.8	KEV	Microsoft Edge	2016-11-10
CVE-2016-7200 HIGH 8.8 KEV Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 8.8	KEV	Microsoft Edge	2016-11-10
CVE-2016-7237 HIGH · vendor Windows 2016-11-08 Local Security Authority Subsystem Service Denial of Service Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7226 HIGH · vendor Windows 2016-11-08 VHD Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7225 HIGH · vendor Windows 2016-11-08 VHD Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7224 HIGH · vendor Windows 2016-11-08 VHD Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-6754 HIGH · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-11-01
CVE-2016-6707 HIGH · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-11-01
CVE-2016-7194 HIGH 7.5 Microsoft Edge 2016-10-14 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…	HIGH 7.5	—	Microsoft Edge	2016-10-14
CVE-2016-7190 HIGH 7.5 Microsoft Edge 2016-10-14 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…	HIGH 7.5	—	Microsoft Edge	2016-10-14
CVE-2016-7189 HIGH 7.5 Microsoft Edge 2016-10-14 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Exec…	HIGH 7.5	—	Microsoft Edge	2016-10-14
CVE-2016-3387 HIGH 7.5 Microsoft Edge 2016-10-14 Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privilege…	HIGH 7.5	—	Microsoft Edge	2016-10-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM