Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 27,728
Actively exploited: 377
Publication window: 2004-07-27 → 2026-11-11

All CVEs 27,728 CISA KEV 377 Public exploit 503 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2022-48391 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-48390 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-46781 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-40538 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-40536 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-40533 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-40529 CRITICAL · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2023-06-01
CVE-2022-40523 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-40521 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-40520 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-40517 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-40516 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-33292 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-33264 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-33257 CRITICAL · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2023-06-01
CVE-2022-33251 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-28349 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2022-22706 HIGH · vendor KEV Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	KEV	Android	2023-06-01
CVE-2022-22060 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2021-0945 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2021-0701 HIGH · vendor Android 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-06-01
CVE-2023-2941 MEDIUM 4.3 2023-05-30 Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extensio…	MEDIUM 4.3	—		2023-05-30
CVE-2023-2940 MEDIUM 6.5 2023-05-30 Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to …	MEDIUM 6.5	—		2023-05-30
CVE-2023-2939 HIGH 7.8 2023-05-30 Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via craft…	HIGH 7.8	—		2023-05-30
CVE-2023-2938 MEDIUM 4.3 2023-05-30 Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process t…	MEDIUM 4.3	—		2023-05-30
CVE-2023-2937 MEDIUM 4.3 2023-05-30 Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process t…	MEDIUM 4.3	—		2023-05-30
CVE-2023-2936 HIGH 8.8 2023-05-30 Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…	HIGH 8.8	—		2023-05-30
CVE-2023-2935 HIGH 8.8 2023-05-30 Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…	HIGH 8.8	—		2023-05-30
CVE-2023-2934 HIGH 8.8 2023-05-30 Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…	HIGH 8.8	—		2023-05-30
CVE-2023-2933 HIGH 8.8 2023-05-30 Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu…	HIGH 8.8	—		2023-05-30
CVE-2023-2932 HIGH 8.8 2023-05-30 Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu…	HIGH 8.8	—		2023-05-30
CVE-2023-2931 HIGH 8.8 2023-05-30 Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu…	HIGH 8.8	—		2023-05-30
CVE-2023-2930 HIGH 8.8 2023-05-30 Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially e…	HIGH 8.8	—		2023-05-30
CVE-2023-2929 HIGH 8.8 2023-05-30 Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …	HIGH 8.8	—		2023-05-30
CVE-2023-2726 HIGH 8.8 2023-05-16 Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web ap…	HIGH 8.8	—		2023-05-16
CVE-2023-2725 HIGH 8.8 2023-05-16 Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially …	HIGH 8.8	—		2023-05-16
CVE-2023-2724 HIGH 8.8 2023-05-16 Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…	HIGH 8.8	—		2023-05-16
CVE-2023-2723 HIGH 8.8 2023-05-16 Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit h…	HIGH 8.8	—		2023-05-16
CVE-2023-2722 HIGH 8.8 2023-05-16 Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafte…	HIGH 8.8	—		2023-05-16
CVE-2023-2721 HIGH 8.8 2023-05-16 Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…	HIGH 8.8	—		2023-05-16
CVE-2023-2458 HIGH 8.8 2023-05-12 Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who convinced a user to engage in specific UI …	HIGH 8.8	—		2023-05-12
CVE-2023-2457 HIGH 8.8 2023-05-12 Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corrupt…	HIGH 8.8	—		2023-05-12
CVE-2023-29335 HIGH 7.5 2023-05-09 Microsoft Word Security Feature Bypass Vulnerability	HIGH 7.5	—		2023-05-09
CVE-2023-24953 HIGH 7.8 2023-05-09 Microsoft Excel Remote Code Execution Vulnerability	HIGH 7.8	—		2023-05-09
CVE-2023-29336 HIGH · vendor KEV Windows 2023-05-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2023-05-09
CVE-2023-29325 CRITICAL · vendor Windows 2023-05-09 Windows OLE Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-05-09
CVE-2023-29324 HIGH · vendor Windows 2023-05-09 Windows MSHTML Platform Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-28283 CRITICAL · vendor Windows 2023-05-09 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-05-09
CVE-2023-28251 HIGH · vendor Windows 2023-05-09 Windows Driver Revocation List Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24949 HIGH · vendor Windows 2023-05-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-05-09

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM