Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

6,380 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
6,380
Actively exploited
33
Publication window
2009-07-30 → 2026-11-11
All CVEs 6,380 CISA KEV 33 Public exploit 39 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

6,380 entries Medium Clear all
CVE
CVE-2016-3888
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3887
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3886
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3884
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3883
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2015-2922
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3329
MEDIUM 5.3
Microsoft Edge

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Internet Explorer Info…
CVE-2016-3327
MEDIUM 5.3
Microsoft Edge

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Informa…
CVE-2016-3326
MEDIUM 5.3
Microsoft Edge

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Informa…
CVE-2016-3299
MEDIUM 5.3
Windows

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Go…
CVE-2016-4578
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-4569
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-4486
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3853
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3839
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3838
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3837
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3836
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3835
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3834
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3833
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3832
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-2497
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-2060
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2014-9900
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2014-9899
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2014-9898
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2014-9897
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2014-9896
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2014-9895
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2014-9894
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2014-9893
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2014-9891
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2014-9890
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-5137
MEDIUM 4.3
Chrome Google Chrome

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Go…
CVE-2016-5135
MEDIUM 6.5
Chrome Google Chrome

WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information ins…
CVE-2016-5133
MEDIUM 5.3
Chrome Google Chrome

Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-middle attackers to spoof a proxy-authenti…
CVE-2016-5130
MEDIUM 6.5
Chrome Google Chrome

content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allo…
CVE-2016-1707
MEDIUM 6.5
Chrome Google Chrome

ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL…
CVE-2016-3279
MEDIUM 5.5
Microsoft Excel Microsoft Office Microsoft PowerPoint Microsoft Word +1

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoin…
CVE-2016-3277
MEDIUM 5.3
Microsoft Edge

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser …
CVE-2016-3273
MEDIUM 5.3
Microsoft Edge

The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript code, which allows remote attackers to obta…
CVE-2016-3271
MEDIUM 6.5
Microsoft Edge

The VBScript engine in Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine…
CVE-2016-3244
MEDIUM 4.3
Microsoft Edge

Microsoft Edge allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge Security Feature Bypass."
CVE-2016-3816
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3815
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3814
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3813
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3812
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-3811
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM