Vulnerabilities

Tracked app vulnerabilities

6,380 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 6,380
Actively exploited: 33
Publication window: 2009-07-30 → 2026-11-11

All CVEs 6,380 CISA KEV 33 Public exploit 39 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

6,380 entries Medium Clear all

CVE	Severity	KEV	Apps	Published
CVE-2017-5105 MEDIUM 6.5 2017-10-27 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform dom…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5104 MEDIUM 6.5 2017-10-27 Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5103 MEDIUM 4.3 2017-10-27 Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensit…	MEDIUM 4.3	—		2017-10-27
CVE-2017-5102 MEDIUM 4.3 2017-10-27 Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potential…	MEDIUM 4.3	—		2017-10-27
CVE-2017-5101 MEDIUM 6.5 2017-10-27 Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of t…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5094 MEDIUM 6.5 2017-10-27 Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to poten…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5093 MEDIUM 6.5 2017-10-27 Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote att…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5090 MEDIUM 6.5 2017-10-27 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoofing via a crafted d…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5089 MEDIUM 6.5 2017-10-27 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofing via a crafted d…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5086 MEDIUM 6.5 2017-10-27 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via …	MEDIUM 6.5	—		2017-10-27
CVE-2017-5067 MEDIUM 6.5 2017-10-27 An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5065 MEDIUM 4.7 2017-10-27 Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attacker to potentially c…	MEDIUM 4.7	—		2017-10-27
CVE-2017-5061 MEDIUM 5.3 2017-10-27 A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibo…	MEDIUM 5.3	—		2017-10-27
CVE-2015-1239 MEDIUM 6.5 2017-10-18 Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a deni…	MEDIUM 6.5	—		2017-10-18
CVE-2017-8726 MEDIUM 4.3 Microsoft Edge 2017-10-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre…	MEDIUM 4.3	—	Microsoft Edge	2017-10-13
CVE-2017-11794 MEDIUM 4.3 Microsoft Edge 2017-10-13 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles…	MEDIUM 4.3	—	Microsoft Edge	2017-10-13
CVE-2015-1206 MEDIUM 5.5 2017-10-06 Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service (unpaged memory write and process crash) via a craf…	MEDIUM 5.5	—		2017-10-06
CVE-2017-0816 MEDIUM · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-10-01
CVE-2017-0815 MEDIUM · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-10-01
CVE-2016-10511 MEDIUM 5.9 X (anciennement Twitter) 2017-09-18 The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitti…	MEDIUM 5.9	—	X (anciennement Twitter)	2017-09-18
CVE-2017-8754 MEDIUM 4.2 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malici…	MEDIUM 4.2	—	Microsoft Edge	2017-09-13
CVE-2017-8739 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that the Microsoft…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-8736 MEDIUM 4.3 Microsoft Edge 2017-09-13 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Intern…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-8735 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user by redirecting the user to a speciall…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-8724 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way t…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-8723 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malici…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-8643 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to leave a malicious website open during user clipboa…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-9720 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-9677 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-9676 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-8281 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-8280 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-8277 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-8251 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-8250 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-8247 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-7616 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-12146 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-11040 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-11002 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-11001 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-11000 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-10999 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-10998 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-10997 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-0804 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-0803 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-0802 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-0794 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01
CVE-2017-0792 MEDIUM · vendor Android 2017-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-09-01

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM