Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

2,726 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
2,726
Actively exploited
48
Publication window
2007-08-28 → 2026-11-11
All CVEs 2,726 CISA KEV 48 Public exploit 56 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

2,726 entries Critical Hide N/A Clear all
CVE
CVE-2019-5759
CRITICAL 9.6
Chrome Google Chrome

Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform …
CVE-2019-0662
CRITICAL · vendor
Windows

GDI+ Remote Code Execution Vulnerability
CVE-2019-0626
CRITICAL · vendor
Windows

Windows DHCP Server Remote Code Execution Vulnerability
CVE-2019-0618
CRITICAL · vendor
Windows

GDI+ Remote Code Execution Vulnerability
CVE-2018-18505
CRITICAL 10.0
Mozilla Thunderbird Mozilla Firefox

An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server pa…
CVE-2018-18501
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory c…
CVE-2018-18500
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being fre…
CVE-2019-1992
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-1991
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-1988
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-1987
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-1986
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-6271
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-11945
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-11938
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-11820
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-11289
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-11262
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-6127
CRITICAL 9.6
Chrome Google Chrome

Early free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to potentially…
CVE-2018-16068
CRITICAL 9.6
Chrome Google Chrome

Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2017-15402
CRITICAL 9.6
Chrome Google Chrome

Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any other frame in the same process in Navig…
CVE-2019-0551
CRITICAL · vendor
Windows

Windows Hyper-V Remote Code Execution Vulnerability
CVE-2019-0550
CRITICAL · vendor
Windows

Windows Hyper-V Remote Code Execution Vulnerability
CVE-2019-0547
CRITICAL · vendor
Windows

Windows DHCP Client Remote Code Execution Vulnerability
CVE-2018-9583
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-11847
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-8634
CRITICAL · vendor
Windows

Microsoft Text-To-Speech Remote Code Execution Vulnerability
CVE-2018-8626
CRITICAL · vendor
Windows

Windows DNS Server Heap Overflow Vulnerability
CVE-2018-9578
CRITICAL 9.8
Android

In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote e…
CVE-2018-19857
CRITICAL 9.1
VLC VLC media player

The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF fi…
CVE-2018-6152
CRITICAL 9.6
Chrome Google Chrome

The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0…
CVE-2018-9556
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-9555
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-9552
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-9551
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-9550
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-9549
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-11279
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-8248
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-18141
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-11004
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-15715
CRITICAL 9.8
Zoom

Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to unauth…
CVE-2018-17472
CRITICAL 9.6
Chrome Google Chrome

Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sand…
CVE-2018-17462
CRITICAL 9.6
Chrome Google Chrome

Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page.
CVE-2018-8553
CRITICAL · vendor
Windows

Microsoft Graphics Components Remote Code Execution Vulnerability
CVE-2018-8544
CRITICAL · vendor
Windows

Windows VBScript Engine Remote Code Execution Vulnerability
CVE-2018-8476
CRITICAL · vendor
Windows

Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
CVE-2018-9537
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-9536
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-9531
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM