Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

6,476 CVEs affect a tracked app or OS (all severities, Android). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
6,476
Actively exploited
48
Publication window
2015-07-23 → 2026-11-04

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

6,476 entries Android Hide N/A Clear all
CVE
CVE-2025-38500
HIGH 7.8

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md p…

CVE-2025-48530
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-27038
HIGH · vendor KEV

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22441
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-21479
CRITICAL · vendor KEV

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0932
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-38352
HIGH 7.8 KEV

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If…

CVE-2025-38349
HIGH 7.8

In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still holding the ep mutex Jann Horn points …

CVE-2025-49462
LOW 3.5

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.

CVE-2025-49702
CRITICAL · vendor

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-49697
CRITICAL · vendor

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-49696
CRITICAL · vendor

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-49695
CRITICAL · vendor

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-38236
HIGH 7.8

In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free i…

CVE-2025-47953
CRITICAL · vendor

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47167
CRITICAL · vendor

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47164
CRITICAL · vendor

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-47162
CRITICAL · vendor

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-32312
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-27029
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26463
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26462
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26458
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26456
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26455
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26453
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26452
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26450
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26449
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26448
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26445
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26443
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26441
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26437
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26432
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-25178
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-21486
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-21485
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-21424
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0835
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0819
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0478
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0468
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0073
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53026
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53021
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53020
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53019
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53010
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-47893
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM