Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 27,728
Actively exploited: 377
Publication window: 2004-07-27 → 2026-11-11

All CVEs 27,728 CISA KEV 377 Public exploit 503 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2023-25729 HIGH 8.8 2023-06-02 Permission prompts for opening external schemes were only shown for <code>ContentPrincipals</code> resulting in extensions being able to open them without user…	HIGH 8.8	—		2023-06-02
CVE-2023-25728 MEDIUM 6.5 2023-06-02 The <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe t…	MEDIUM 6.5	—		2023-06-02
CVE-2023-23605 HIGH 8.8 2023-06-02 Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6. Some of these bugs showed evidence of…	HIGH 8.8	—		2023-06-02
CVE-2023-23604 MEDIUM 6.5 Mozilla Firefox 2023-06-02 A duplicate `SystemPrincipal` object could be created when parsing a non-system html document via `DOMParser::ParseFromSafeString`. This could have lead to byp…	MEDIUM 6.5	—	Mozilla Firefox	2023-06-02
CVE-2023-23603 MEDIUM 6.5 2023-06-02 Regular expressions used to filter out forbidden properties and values from style directives in calls to `console.log` weren't accounting for external URLs. Da…	MEDIUM 6.5	—		2023-06-02
CVE-2023-23602 MEDIUM 6.5 2023-06-02 A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to co…	MEDIUM 6.5	—		2023-06-02
CVE-2023-23601 MEDIUM 6.5 2023-06-02 Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vulnerability…	MEDIUM 6.5	—		2023-06-02
CVE-2023-23599 MEDIUM 6.5 2023-06-02 When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands …	MEDIUM 6.5	—		2023-06-02
CVE-2023-23598 MEDIUM 6.5 2023-06-02 Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website cou…	MEDIUM 6.5	—		2023-06-02
CVE-2023-1945 MEDIUM 6.5 Mozilla Thunderbird 2023-06-02 Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunder…	MEDIUM 6.5	—	Mozilla Thunderbird	2023-06-02
CVE-2023-0767 HIGH 8.8 2023-06-02 An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. …	HIGH 8.8	—		2023-06-02
CVE-2023-0616 MEDIUM 6.5 Mozilla Thunderbird 2023-06-02 If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause T…	MEDIUM 6.5	—	Mozilla Thunderbird	2023-06-02
CVE-2023-0547 MEDIUM 6.5 Mozilla Thunderbird 2023-06-02 OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird v…	MEDIUM 6.5	—	Mozilla Thunderbird	2023-06-02
CVE-2023-0430 MEDIUM 6.5 Mozilla Thunderbird 2023-06-02 Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a vali…	MEDIUM 6.5	—	Mozilla Thunderbird	2023-06-02
CVE-2022-35742 HIGH 7.5 2023-06-01 Microsoft Outlook Denial of Service Vulnerability	HIGH 7.5	—		2023-06-01
CVE-2023-21670 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21669 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21661 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21659 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21658 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21657 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21656 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21628 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21144 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21143 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21142 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21141 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21139 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21138 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21137 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21136 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21135 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21131 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21130 CRITICAL · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2023-06-01
CVE-2023-21129 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21128 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21127 CRITICAL · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2023-06-01
CVE-2023-21126 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21124 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21123 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21122 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21121 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21120 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21115 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21108 CRITICAL · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2023-06-01
CVE-2023-21105 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21101 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-21095 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-48438 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-48392 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM