Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,052
Actively exploited
374
Publication window
1997-01-01 → 2026-10-20
All CVEs 28,052 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,052 entries
CVE
CVE-2026-24292
HIGH · vendor
Windows

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
CVE-2026-24291
HIGH · vendor
Windows

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
CVE-2026-24290
HIGH · vendor
Windows

Windows Projected File System Elevation of Privilege Vulnerability
CVE-2026-24288
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2026-24287
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-24283
HIGH · vendor
Windows

Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability
CVE-2026-24282
HIGH · vendor
Windows

Push message Routing Service Elevation of Privilege Vulnerability
CVE-2026-23674
HIGH · vendor
Windows

MapUrlToZone Security Feature Bypass Vulnerability
CVE-2026-23673
HIGH · vendor
Windows

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-23672
HIGH · vendor
Windows

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
CVE-2026-23671
HIGH · vendor
Windows

Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability
CVE-2026-23669
HIGH · vendor
Windows

RPC Runtime Library Remote Code Execution Vulnerability
CVE-2026-23668
HIGH · vendor
Windows

Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2026-23667
HIGH · vendor
Windows

Broadcast DVR Elevation of Privilege Vulnerability
CVE-2026-3545
CRITICAL 9.6
Chrome Google Chrome

Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a cra…
CVE-2026-3544
HIGH 8.8
Chrome Google Chrome

Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTM…
CVE-2026-3543
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a …
CVE-2026-3542
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a cra…
CVE-2026-3541
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HT…
CVE-2026-3540
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafte…
CVE-2026-3538
HIGH 8.8
Chrome Google Chrome

Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HT…
CVE-2026-3537
HIGH 8.8
Google Chrome

Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a cr…
CVE-2026-3536
HIGH 8.8
Chrome Google Chrome

Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted H…
CVE-2026-0017
HIGH 7.7
Android

In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalatio…
CVE-2026-0014
MEDIUM 6.2
Android

In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local den…
CVE-2026-0013
HIGH 8.4
Android

In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local esca…
CVE-2026-0012
MEDIUM 6.2
Android

In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This could lead to local inf…
CVE-2026-0011
HIGH 8.4
Android

In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead t…
CVE-2026-0010
HIGH 8.4
Android

In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg…
CVE-2026-21385
HIGH · vendor KEV
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20434
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20428
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20427
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20426
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20425
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20422
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20421
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20420
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20406
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20405
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20404
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20403
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20402
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20401
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-0047
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-0038
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-0037
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-0035
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-0034
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-0032
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM