Vulnerabilities

Tracked app vulnerabilities

2,726 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 2,726
Actively exploited: 48
Publication window: 2007-08-28 → 2026-11-11

All CVEs 2,726 CISA KEV 48 Public exploit 56 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

2,726 entries Critical Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2021-21142 CRITICAL 9.6 2021-02-09 Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21132 CRITICAL 9.6 2021-02-09 Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21124 CRITICAL 9.6 2021-02-09 Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox esc…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21121 CRITICAL 9.6 2021-02-09 Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-24094 CRITICAL · vendor Windows 2021-02-09 Windows TCP/IP Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24093 CRITICAL · vendor Windows 2021-02-09 Windows Graphics Component Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24091 CRITICAL · vendor Windows 2021-02-09 Windows Camera Codec Pack Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24088 CRITICAL · vendor Windows 2021-02-09 Windows Local Spooler Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24081 CRITICAL · vendor Windows 2021-02-09 Microsoft Windows Codecs Library Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24078 CRITICAL · vendor Windows 2021-02-09 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24077 CRITICAL · vendor Windows 2021-02-09 Windows Fax Service Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24074 CRITICAL · vendor Windows 2021-02-09 Windows TCP/IP Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-1722 CRITICAL · vendor Windows 2021-02-09 Windows Fax Service Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-0326 CRITICAL · vendor Android 2021-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-02-01
CVE-2020-11272 CRITICAL · vendor Android 2021-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-02-01
CVE-2020-11170 CRITICAL · vendor Android 2021-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-02-01
CVE-2020-11163 CRITICAL · vendor Android 2021-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-02-01
CVE-2021-3177 CRITICAL 9.8 2021-01-19 Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications tha…	CRITICAL 9.8	—		2021-01-19
CVE-2020-16045 CRITICAL 9.6 2021-01-14 Use after Free in Payments in Google Chrome on Android prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially …	CRITICAL 9.6	—		2021-01-14
CVE-2021-1673 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1668 CRITICAL · vendor Windows 2021-01-12 Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1667 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1666 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1665 CRITICAL · vendor Windows 2021-01-12 GDI+ Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1660 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1658 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-21115 CRITICAL 9.6 2021-01-08 User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perf…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21111 CRITICAL 9.6 2021-01-08 Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to p…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21110 CRITICAL 9.6 2021-01-08 Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pa…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21109 CRITICAL 9.6 2021-01-08 Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a …	CRITICAL 9.6	—		2021-01-08
CVE-2021-21108 CRITICAL 9.6 2021-01-08 Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a san…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21107 CRITICAL 9.6 2021-01-08 Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentia…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21106 CRITICAL 9.6 2021-01-08 Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a …	CRITICAL 9.6	—		2021-01-08
CVE-2020-16025 CRITICAL 9.6 2021-01-08 Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perf…	CRITICAL 9.6	—		2021-01-08
CVE-2020-16024 CRITICAL 9.6 2021-01-08 Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a s…	CRITICAL 9.6	—		2021-01-08
CVE-2020-16018 CRITICAL 9.6 2021-01-08 Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a s…	CRITICAL 9.6	—		2021-01-08
CVE-2020-16017 CRITICAL 9.6 2021-01-08 Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perf…	CRITICAL 9.6	—		2021-01-08
CVE-2020-16016 CRITICAL 9.6 2021-01-08 Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially …	CRITICAL 9.6	—		2021-01-08
CVE-2020-16014 CRITICAL 9.6 2021-01-08 Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sand…	CRITICAL 9.6	—		2021-01-08
CVE-2021-0316 CRITICAL · vendor Android 2021-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-01-01
CVE-2021-0313 CRITICAL · vendor Android 2021-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-01-01
CVE-2020-11182 CRITICAL · vendor Android 2021-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-01-01
CVE-2020-11134 CRITICAL · vendor Android 2021-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-01-01
CVE-2020-17095 CRITICAL · vendor Windows 2020-12-08 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-12-08
CVE-2020-3691 CRITICAL · vendor Android 2020-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2020-12-01
CVE-2020-3686 CRITICAL · vendor Android 2020-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2020-12-01
CVE-2020-3685 CRITICAL · vendor Android 2020-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2020-12-01
CVE-2020-11225 CRITICAL · vendor Android 2020-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2020-12-01
CVE-2020-11143 CRITICAL · vendor Android 2020-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2020-12-01
CVE-2020-11140 CRITICAL · vendor Android 2020-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2020-12-01

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM