Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
27,728
Actively exploited
377
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all
CVE
CVE-2025-1935
MEDIUM 4.3

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability was fixed in Firefox 136, Firefox ESR…

CVE-2025-1934
MEDIUM 6.5

It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was no…

CVE-2025-1933
HIGH 7.6

On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a di…

CVE-2025-1932
HIGH 8.1

An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This …

CVE-2025-1931
HIGH 7.5

It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. This vulnerabil…

CVE-2025-1930
HIGH 8.8

On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led t…

CVE-2025-26417
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22413
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22412
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22411
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22410
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22409
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22408
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22407
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22406
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22405
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22404
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-22403
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-20645
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-20644
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0093
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0092
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0086
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0084
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0083
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0082
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0081
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0080
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0079
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0078
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0075
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-0074
CRITICAL · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53027
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53025
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53024
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53014
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-53011
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-49838
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-49836
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-49740
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-43093
HIGH · vendor KEV

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-43090
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-43051
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-0032
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2023-21125
HIGH · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2025-26466
MEDIUM 5.9

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of p…

CVE-2025-21755
HIGH · vendor

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2025-1426
HIGH 8.8

Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted …

CVE-2025-1006
HIGH 8.8

Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. (Chr…

CVE-2025-0999
HIGH 8.8

Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM