Vulnerabilities
Tracked app vulnerabilities
18,214 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,214
- Actively exploited
- 296
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-14327
HIGH 7.5
Spoofing issue in the Downloads Panel component. This vulnerability was fixed in Firefox 146, Thunderbird 146, Firefox ESR 140.7, and Thunderbird 140.7. |
|
CVE-2025-14325
HIGH 7.3
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 14… |
|
CVE-2025-14323
HIGH 8.8
Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, … |
|
CVE-2025-14322
HIGH 8.0
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Fi… |
|
CVE-2025-64680
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-64679
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-64678
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-64673
HIGH · vendor
Windows Storage VSP Driver Elevation of Privilege Vulnerability |
|
CVE-2025-64670
HIGH · vendor
Windows DirectX Information Disclosure Vulnerability |
|
CVE-2025-62573
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-62571
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-62567
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2025-62565
HIGH · vendor
Windows File Explorer Elevation of Privilege Vulnerability |
|
CVE-2025-62465
HIGH · vendor
DirectX Graphics Kernel Denial of Service Vulnerability |
|
CVE-2025-62454
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2025-48639
HIGH 7.3
In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could lead to loc… |
|
CVE-2025-48638
HIGH 7.8
In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege w… |
|
CVE-2025-48637
HIGH 7.8
In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege wi… |
|
CVE-2025-48632
HIGH 7.8
In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due to imprope… |
|
CVE-2025-48629
HIGH 7.8
In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default v… |
|
CVE-2025-48628
HIGH 7.8
In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. This could lead to local escalatio… |
|
CVE-2025-48627
HIGH 7.8
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a logic error in the … |
|
CVE-2025-48624
HIGH 7.8
In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privil… |
|
CVE-2025-48623
HIGH 7.8
In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege wit… |
|
CVE-2025-48621
HIGH 7.3
In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This could lead to local escalation of privi… |
|
CVE-2025-48620
HIGH 7.8
In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's component name to persist even after u… |
|
CVE-2025-48615
HIGH 7.8
In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaustion. This could lead to local escalatio… |
|
CVE-2025-48612
HIGH 7.8
In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to improper … |
|
CVE-2025-48599
HIGH 7.8
In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to a missing permission check. This could… |
|
CVE-2025-48597
HIGH 7.8
In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalat… |
|
CVE-2025-48596
HIGH 7.8
In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no add… |
|
CVE-2025-48594
HIGH 7.3
In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation due to improper inp… |
|
CVE-2025-48592
HIGH 7.5
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure wi… |
|
CVE-2025-48589
HIGH 7.8
In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code. This coul… |
|
CVE-2025-48588
HIGH 7.8
In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. This could lead to local escalation of priv… |
|
CVE-2025-48586
HIGH 7.8
In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to l… |
|
CVE-2025-48583
HIGH 7.8
In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalati… |
|
CVE-2025-48580
HIGH 7.8
In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in background due to a logic error in the c… |
|
CVE-2025-48575
HIGH 7.8
In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypass. This could lead to local escalation o… |
|
CVE-2025-48573
HIGH 7.8
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use … |
|
CVE-2025-48572
In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local escalation of pri… |
|
CVE-2025-48566
HIGH 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional exec… |
|
CVE-2025-48565
HIGH 7.8
In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the code. This could lead to local escalation … |
|
CVE-2025-48564
HIGH 7.0
In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escalation of privilege with no additional ex… |
|
CVE-2025-48555
HIGH 7.8
In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a confused deputy. This could lead to local … |
|
CVE-2025-48536
HIGH 7.8
In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to modify secure settings due to a confused … |
|
CVE-2025-48525
HIGH 7.8
In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a companion device… |
|
CVE-2025-32329
HIGH 7.8
In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code. Thi… |
|
CVE-2025-32328
HIGH 7.8
In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the device due to a logic error in the code. Thi… |
|
CVE-2025-22420
HIGH 7.8
In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This could lead to local escalation of privil… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.