Vulnerabilities
Tracked app vulnerabilities
6,380 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 6,380
- Actively exploited
- 33
- Publication window
- 2009-07-30 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-22746
MEDIUM 5.9
A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.<br>*This bug only… |
|
CVE-2022-22745
MEDIUM 6.5
Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. This vulnerability affects Firefox ESR < 91.5, Firefo… |
|
CVE-2022-22743
MEDIUM 4.3
When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mod… |
|
CVE-2022-22742
MEDIUM 6.5
When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This vulnerabil… |
|
CVE-2022-22739
MEDIUM 6.5
Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol. This vulnerability affects Firefox ESR < 91.… |
|
CVE-2022-1834
MEDIUM 6.5
When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displaye… |
|
CVE-2022-1520
MEDIUM 4.3
When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encr… |
|
CVE-2022-1197
MEDIUM 5.4
When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet r… |
|
CVE-2022-1196
MEDIUM 6.5
After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash. This vulnera… |
|
CVE-2022-1097
MEDIUM 6.5
<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-fre… |
|
CVE-2021-4126
MEDIUM 6.5
When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list … |
|
CVE-2022-24480
MEDIUM 6.3
Outlook for Android Elevation of Privilege Vulnerability |
|
CVE-2022-44698
Windows SmartScreen Security Feature Bypass Vulnerability |
|
CVE-2022-43363
MEDIUM 6.1
Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website. NOTE: some third parties have been unable to discern any relati… |
|
CVE-2022-20468
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20466
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-4195
MEDIUM 4.3
Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malic… |
|
CVE-2022-4189
MEDIUM 4.3
Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension t… |
|
CVE-2022-4188
MEDIUM 4.3
Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy vi… |
|
CVE-2022-4187
MEDIUM 6.5
Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker to bypass filesystem restrictions via … |
|
CVE-2022-4186
MEDIUM 4.3
Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious… |
|
CVE-2022-4185
MEDIUM 4.3
Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue… |
|
CVE-2022-4184
MEDIUM 4.3
Insufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass autofill restrictions via a crafted HTM… |
|
CVE-2022-4183
MEDIUM 4.3
Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass navigation restrictions via a craf… |
|
CVE-2022-4182
MEDIUM 4.3
Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass fenced frame restrictions via a craft… |
|
CVE-2022-41105
MEDIUM 5.5
Microsoft Excel Information Disclosure Vulnerability |
|
CVE-2022-41104
MEDIUM 5.5
Microsoft Excel Security Feature Bypass Vulnerability |
|
CVE-2022-41103
MEDIUM 5.5
Microsoft Word Information Disclosure Vulnerability |
|
CVE-2022-41099
MEDIUM 4.6
BitLocker Security Feature Bypass Vulnerability |
|
CVE-2022-41098
MEDIUM 5.5
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2022-41097
MEDIUM 6.5
Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability |
|
CVE-2022-41091
Windows Mark of the Web Security Feature Bypass Vulnerability |
|
CVE-2022-41090
MEDIUM 5.9
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
|
CVE-2022-41086
MEDIUM 6.4
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2022-41060
MEDIUM 5.5
Microsoft Word Information Disclosure Vulnerability |
|
CVE-2022-41055
MEDIUM 5.5
Windows Human Interface Device Information Disclosure Vulnerability |
|
CVE-2022-41049
Windows Mark of the Web Security Feature Bypass Vulnerability |
|
CVE-2022-38015
MEDIUM 6.5
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2022-3447
MEDIUM 4.3
Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox … |
|
CVE-2022-3661
MEDIUM 4.3
Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the renderer process to leak c… |
|
CVE-2022-3660
MEDIUM 4.3
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304.62 allowed a remote attacker to hide the contents of the Omnib… |
|
CVE-2022-3444
MEDIUM 4.3
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a craf… |
|
CVE-2022-3443
MEDIUM 4.3
Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a craf… |
|
CVE-2022-3318
MEDIUM 4.3
Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS… |
|
CVE-2022-3317
MEDIUM 4.3
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restric… |
|
CVE-2022-3316
MEDIUM 4.3
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass security feature via a … |
|
CVE-2022-3314
MEDIUM 6.5
Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbo… |
|
CVE-2022-3313
MEDIUM 6.5
Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium … |
|
CVE-2022-3312
MEDIUM 4.6
Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restric… |
|
CVE-2022-3311
MEDIUM 6.5
Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.