Vulnerabilities

Tracked app vulnerabilities

640 CVEs affect a tracked app or OS (all severities, all platforms). 373 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 640
Actively exploited: 373
Publication window: 1999-11-11 → 2026-05-04

All CVEs 26,416 CISA KEV 373 Public exploit 640 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

640 entries Public exploit Clear all

CVE	Severity	KEV	Apps	Published
CVE-2016-7288 HIGH 7.5 Microsoft Edge 2016-12-20 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2016-7287 HIGH 7.5 Microsoft Edge 2016-12-20 The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memor…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2016-7286 HIGH 7.5 Microsoft Edge 2016-12-20 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2016-7274 CRITICAL · vendor Windows 2016-12-13 Windows Uniscribe Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2016-12-13
CVE-2016-6772 MEDIUM · vendor Android 2016-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-12-01
CVE-2016-5195 CRITICAL · vendor KEV Android 2016-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	KEV	Android	2016-12-01
CVE-2014-4014 HIGH · vendor Android 2016-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-12-01
CVE-2016-7255 HIGH 7.8 KEV Windows 2016-11-10 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window…	HIGH 7.8	KEV	Windows	2016-11-10
CVE-2016-7241 HIGH 7.5 Microsoft Edge 2016-11-10 Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7240 HIGH 7.5 Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7203 HIGH 7.5 Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7202 HIGH 7.5 Microsoft Edge 2016-11-10 The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of serv…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7201 HIGH 8.8 KEV Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 8.8	KEV	Microsoft Edge	2016-11-10
CVE-2016-7200 HIGH 8.8 KEV Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 8.8	KEV	Microsoft Edge	2016-11-10
CVE-2016-7237 HIGH · vendor Windows 2016-11-08 Local Security Authority Subsystem Service Denial of Service Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7226 HIGH · vendor Windows 2016-11-08 VHD Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7225 HIGH · vendor Windows 2016-11-08 VHD Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7224 HIGH · vendor Windows 2016-11-08 VHD Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-6828 CRITICAL · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2016-11-01
CVE-2016-6754 HIGH · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-11-01
CVE-2016-6707 HIGH · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-11-01
CVE-2016-2184 CRITICAL · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2016-11-01
CVE-2016-7194 HIGH 7.5 Microsoft Edge 2016-10-14 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…	HIGH 7.5	—	Microsoft Edge	2016-10-14
CVE-2016-7190 HIGH 7.5 Microsoft Edge 2016-10-14 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…	HIGH 7.5	—	Microsoft Edge	2016-10-14
CVE-2016-7189 HIGH 7.5 Microsoft Edge 2016-10-14 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Exec…	HIGH 7.5	—	Microsoft Edge	2016-10-14
CVE-2016-3388 MEDIUM 5.3 Microsoft Edge 2016-10-14 Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privilege…	MEDIUM 5.3	—	Microsoft Edge	2016-10-14
CVE-2016-3387 HIGH 7.5 Microsoft Edge 2016-10-14 Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privilege…	HIGH 7.5	—	Microsoft Edge	2016-10-14
CVE-2016-3386 HIGH 7.5 Microsoft Edge 2016-10-14 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…	HIGH 7.5	—	Microsoft Edge	2016-10-14
CVE-2016-7188 HIGH · vendor Windows 2016-10-11 Windows Diagnostics Hub Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-10-11
CVE-2016-7185 HIGH · vendor Windows 2016-10-11 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-10-11
CVE-2016-7182 HIGH · vendor Windows 2016-10-11 Graphics Component Font Parsing Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-10-11
CVE-2016-3376 HIGH · vendor Windows 2016-10-11 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-10-11
CVE-2016-3209 HIGH · vendor Windows 2016-10-11 GDI+ Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2016-10-11
CVE-2016-0079 HIGH · vendor Windows 2016-10-11 Windows Kernel Local Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-10-11
CVE-2016-0075 HIGH · vendor Windows 2016-10-11 Windows Kernel Local Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-10-11
CVE-2016-0073 HIGH · vendor Windows 2016-10-11 Windows Kernel Local Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-10-11
CVE-2016-0070 HIGH · vendor Windows 2016-10-11 Windows Kernel Local Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-10-11
CVE-2016-6689 MEDIUM · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-10-01
CVE-2016-3325 LOW 3.1 Microsoft Edge 2016-09-14 Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Informa…	LOW 3.1	—	Microsoft Edge	2016-09-14
CVE-2016-3247 HIGH 7.5 Microsoft Edge 2016-09-14 Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft…	HIGH 7.5	—	Microsoft Edge	2016-09-14
CVE-2016-3373 HIGH · vendor Windows 2016-09-13 Windows Kernel Local Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-09-13
CVE-2016-3371 HIGH · vendor Windows 2016-09-13 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-09-13
CVE-2016-0772 MEDIUM 6.5 2016-09-02 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might a…	MEDIUM 6.5	—		2016-09-02
CVE-2016-3861 CRITICAL · vendor Android 2016-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2016-09-01
CVE-2016-3134 CRITICAL · vendor Android 2016-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2016-09-01
CVE-2016-1583 HIGH · vendor Android 2016-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-09-01
CVE-2016-3316 HIGH 7.8 2016-08-09 Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory …	HIGH 7.8	—		2016-08-09
CVE-2016-3309 HIGH · vendor KEV Windows 2016-08-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2016-08-09
CVE-2016-3301 CRITICAL · vendor Windows 2016-08-09 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2016-08-09
CVE-2016-3237 HIGH · vendor Windows 2016-08-09 Kerberos Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2016-08-09

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM