Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

2,726 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
2,726
Actively exploited
48
Publication window
2007-08-28 → 2026-11-11
All CVEs 2,726 CISA KEV 48 Public exploit 56 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

2,726 entries Critical Hide N/A Clear all
CVE
CVE-2020-11138
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-11137
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-11136
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0458
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-17051
CRITICAL · vendor
Windows

Windows Network File System Remote Code Execution Vulnerability
CVE-2020-17042
CRITICAL · vendor
Windows

Windows Print Spooler Remote Code Execution Vulnerability
CVE-2020-1909
CRITICAL 9.8
WhatsApp

A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory cor…
CVE-2020-16011
CRITICAL 9.6
Chrome Google Chrome

Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially…
CVE-2020-16010
CRITICAL 9.6
Chrome Google Chrome

Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially…
CVE-2020-15999
CRITICAL 9.6 KEV
Chrome Google Chrome
Android

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…
CVE-2020-15993
CRITICAL 9.8
Chrome Google Chrome

Use after free in printing in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-3639
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0449
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0442
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0441
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-15683
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory c…
CVE-2020-27619
CRITICAL 9.8
Python 3.12 Python 3.13 Python 3.14

In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
CVE-2020-16968
CRITICAL · vendor
Windows

Windows Camera Codec Pack Remote Code Execution Vulnerability
CVE-2020-16967
CRITICAL · vendor
Windows

Windows Camera Codec Pack Remote Code Execution Vulnerability
CVE-2020-16923
CRITICAL · vendor
Windows

Microsoft Graphics Components Remote Code Execution Vulnerability
CVE-2020-16915
CRITICAL · vendor
Windows

Media Foundation Memory Corruption Vulnerability
CVE-2020-16911
CRITICAL · vendor
Windows

GDI+ Remote Code Execution Vulnerability
CVE-2020-16898
CRITICAL · vendor
Windows

Windows TCP/IP Remote Code Execution Vulnerability
CVE-2020-16891
CRITICAL · vendor
Windows

Windows Hyper-V Remote Code Execution Vulnerability
CVE-2020-1907
CRITICAL 9.8
WhatsApp WhatsApp

A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsA…
CVE-2020-3692
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-3673
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-3657
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-3654
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-11155
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-11154
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-6573
CRITICAL 9.6
Chrome Google Chrome

Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially pe…
CVE-2020-15963
CRITICAL 9.6
Chrome Google Chrome

Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension…
CVE-2020-15961
CRITICAL 9.6
Chrome Google Chrome

Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension …
CVE-2020-1593
CRITICAL · vendor
Windows

Windows Media Audio Decoder Remote Code Execution Vulnerability
CVE-2020-1508
CRITICAL · vendor
Windows

Windows Media Audio Decoder Remote Code Execution Vulnerability
CVE-2020-1319
CRITICAL · vendor
Windows

Microsoft Windows Codecs Library Remote Code Execution Vulnerability
CVE-2020-1285
CRITICAL · vendor
Windows

GDI+ Remote Code Execution Vulnerability
CVE-2020-1252
CRITICAL · vendor
Windows

Windows Remote Code Execution Vulnerability
CVE-2020-1129
CRITICAL · vendor
Windows

Microsoft Windows Codecs Library Remote Code Execution Vulnerability
CVE-2020-0997
CRITICAL · vendor
Windows

Windows Camera Codec Pack Remote Code Execution Vulnerability
CVE-2020-0922
CRITICAL · vendor
Windows

Microsoft COM for Windows Remote Code Execution Vulnerability
CVE-2020-0908
CRITICAL · vendor
Windows

Windows Text Service Module Remote Code Execution Vulnerability
CVE-2020-1891
CRITICAL 9.8
WhatsApp WhatsApp

A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone p…
CVE-2020-3634
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-3621
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0396
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0380
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-13994
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10629
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM