Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
27,728
Actively exploited
377
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all
CVE
CVE-2025-3072
MEDIUM 5.4

Inappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI ges…

CVE-2025-3071
MEDIUM 5.4

Inappropriate implementation in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI ges…

CVE-2025-3070
MEDIUM 6.5

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via …

CVE-2025-3069
HIGH 8.8

Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML…

CVE-2025-3068
HIGH 8.8

Inappropriate implementation in Intents in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a craf…

CVE-2025-3067
HIGH 8.8

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in spec…

CVE-2025-3066
HIGH 8.8

Use after free in Site Isolation in Google Chrome prior to 135.0.7049.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…

CVE-2025-3035
MEDIUM 5.3

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This v…

CVE-2025-3034
HIGH 8.1

Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s…

CVE-2025-3033
HIGH 7.7

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Window…

CVE-2025-3032
HIGH 7.4

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox…

CVE-2025-3031
MEDIUM 6.5

An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability was fixed in Firefox 137 and Thunderbird 137.

CVE-2025-3030
HIGH 8.1

Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption a…

CVE-2025-3029
HIGH 7.3

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerabilit…

CVE-2025-3028
MEDIUM 6.5

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed in Firefox 137, Firef…

CVE-2025-26416
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22439
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22435
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22434
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22433
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22431
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22430
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22429
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22428
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22427
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22423
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22422
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22421
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22419
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22418
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22417
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22416
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-21448
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-21436
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-21435
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-21434
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-21430
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-21429
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-20658
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-20657
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-20656
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-20655
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0050
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-56556
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53197
HIGH · vendor KEV

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53150
HIGH · vendor KEV

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-52938
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-52937
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-52936
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-50264
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM