Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

6,380 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
6,380
Actively exploited
33
Publication window
2009-07-30 → 2026-11-11
All CVEs 6,380 CISA KEV 33 Public exploit 39 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

6,380 entries Medium Hide N/A Clear all
CVE
CVE-2017-5026
MEDIUM 4.3
Chrome Google Chrome

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote att…
CVE-2017-5025
MEDIUM 5.5
Chrome Google Chrome

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentia…
CVE-2017-5024
MEDIUM 5.5
Chrome Google Chrome

FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentia…
CVE-2017-5017
MEDIUM 4.3
Chrome Google Chrome

Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extrac…
CVE-2017-5013
MEDIUM 6.5
Chrome Google Chrome

Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the c…
CVE-2017-5011
MEDIUM 6.5
Chrome Google Chrome

Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malic…
CVE-2017-0451
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0450
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0449
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0426
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0425
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0424
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0423
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8414
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-10044
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-5226
MEDIUM 6.1
Chrome Google Chrome

Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, whi…
CVE-2016-5214
MEDIUM 4.3
Chrome Google Chrome

Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the …
CVE-2016-5205
MEDIUM 6.1
Chrome Google Chrome

Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arb…
CVE-2016-5201
MEDIUM 6.5
Chrome Google Chrome

A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed …
CVE-2017-0402
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0401
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0400
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0399
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0398
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0397
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0396
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0395
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-0381
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8475
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8474
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8473
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8472
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8471
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8470
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8469
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8468
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8466
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8464
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-5080
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2014-9420
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-7282
MEDIUM 6.1
Microsoft Edge

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject arbitrary web script …
CVE-2016-7281
MEDIUM 5.3
Microsoft Edge

The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspeci…
CVE-2016-7280
MEDIUM 6.1
Microsoft Edge

Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microso…
CVE-2016-7267
MEDIUM 5.5
Microsoft Excel Office

Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote attackers to execute arbitrary code via a cr…
CVE-2016-7206
MEDIUM 6.1
Microsoft Edge

Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microso…
CVE-2016-5192
MEDIUM 6.5
Chrome Google Chrome

Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-or…
CVE-2016-5188
MEDIUM 4.3
Chrome Google Chrome

Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via cr…
CVE-2016-8410
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8409
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-8408
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM