Vulnerabilities

Tracked app vulnerabilities

10,961 CVEs affect a tracked app or OS (all severities, macOS). 106 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 10,961
Actively exploited: 106
Publication window: 1997-01-01 → 2026-11-11

All CVEs 10,961 CISA KEV 106 Public exploit 150 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

10,961 entries macOS Clear all

CVE	Severity	KEV	Published
CVE-2012-5122 N/A 2012-11-07 Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input, which allows remote attackers to cause …	N/A	—	2012-11-07
CVE-2012-5121 N/A 2012-11-07 Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impac…	N/A	—	2012-11-07
CVE-2012-5120 N/A 2012-11-07 Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or poss…	N/A	—	2012-11-07
CVE-2012-5119 N/A 2012-11-07 Race condition in Pepper, as used in Google Chrome before 23.0.1271.64, allows remote attackers to cause a denial of service or possibly have unspecified other…	N/A	—	2012-11-07
CVE-2012-5118 N/A 2012-11-07 Google Chrome before 23.0.1271.64 on Mac OS X does not properly validate an integer value during the handling of GPU command buffers, which allows remote attac…	N/A	—	2012-11-07
CVE-2012-5117 N/A 2012-11-07 Google Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in the context of an IMG element, which has unspecified impact a…	N/A	—	2012-11-07
CVE-2012-5116 N/A 2012-11-07 Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impac…	N/A	—	2012-11-07
CVE-2012-5115 N/A 2012-11-07 Google Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior in graphics drivers, which allows remote attackers to cause a …	N/A	—	2012-11-07
CVE-2012-5672 N/A 2012-10-25 Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access vio…	N/A	—	2012-10-25
CVE-2012-5376 CRITICAL 9.6 2012-10-11 The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and w…	CRITICAL 9.6	—	2012-10-11
CVE-2012-5112 N/A 2012-10-11 Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary co…	N/A	—	2012-10-11
CVE-2012-2528 N/A 2012-10-09 Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Se…	N/A	—	2012-10-09
CVE-2012-0182 N/A 2012-10-09 Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code v…	N/A	—	2012-10-09
CVE-2012-5111 N/A 2012-10-09 Google Chrome before 22.0.1229.92 does not monitor for crashes of Pepper plug-ins, which has unspecified impact and remote attack vectors.	N/A	—	2012-10-09
CVE-2012-5110 N/A 2012-10-09 The compositor in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.	N/A	—	2012-10-09
CVE-2012-5109 N/A 2012-10-09 The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-…	N/A	—	2012-10-09
CVE-2012-5108 N/A 2012-10-09 Race condition in Google Chrome before 22.0.1229.92 allows remote attackers to execute arbitrary code via vectors related to audio devices.	N/A	—	2012-10-09
CVE-2012-2900 N/A 2012-10-09 Skia, as used in Google Chrome before 22.0.1229.92, does not properly render text, which allows remote attackers to cause a denial of service (application cras…	N/A	—	2012-10-09
CVE-2012-2897 HIGH 7.8 2012-09-26 The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gol…	HIGH 7.8	—	2012-09-26
CVE-2012-2896 N/A 2012-09-26 Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of service or possibly …	N/A	—	2012-09-26
CVE-2012-2895 N/A 2012-09-26 The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via v…	N/A	—	2012-09-26
CVE-2012-2894 N/A 2012-09-26 Google Chrome before 22.0.1229.79 does not properly handle graphics-context data structures, which allows remote attackers to cause a denial of service (applic…	N/A	—	2012-09-26
CVE-2012-2893 N/A 2012-09-26 Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspe…	N/A	—	2012-09-26
CVE-2012-2892 N/A 2012-09-26 Unspecified vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to bypass the pop-up blocker via unknown vectors.	N/A	—	2012-09-26
CVE-2012-2891 N/A 2012-09-26 The IPC implementation in Google Chrome before 22.0.1229.79 allows attackers to obtain potentially sensitive information about memory addresses via unspecified…	N/A	—	2012-09-26
CVE-2012-2890 N/A 2012-09-26 Use-after-free vulnerability in the PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly hav…	N/A	—	2012-09-26
CVE-2012-2889 N/A 2012-09-26 Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involv…	N/A	—	2012-09-26
CVE-2012-2888 N/A 2012-09-26 Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impac…	N/A	—	2012-09-26
CVE-2012-2887 N/A 2012-09-26 Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impac…	N/A	—	2012-09-26
CVE-2012-2886 N/A 2012-09-26 Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors relate…	N/A	—	2012-09-26
CVE-2012-2885 N/A 2012-09-26 Double free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact v…	N/A	—	2012-09-26
CVE-2012-2884 N/A 2012-09-26 Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.	N/A	—	2012-09-26
CVE-2012-2883 N/A 2012-09-26 Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors …	N/A	—	2012-09-26
CVE-2012-2882 N/A 2012-09-26 FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or po…	N/A	—	2012-09-26
CVE-2012-2881 N/A 2012-09-26 Google Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (DOM tree corruption) or possib…	N/A	—	2012-09-26
CVE-2012-2880 N/A 2012-09-26 Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors …	N/A	—	2012-09-26
CVE-2012-2879 N/A 2012-09-26 Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service (DOM topology corruption) via a crafted document.	N/A	—	2012-09-26
CVE-2012-2878 N/A 2012-09-26 Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impac…	N/A	—	2012-09-26
CVE-2012-2877 N/A 2012-09-26 The extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs, which allows remote attackers to cause a denial of service (a…	N/A	—	2012-09-26
CVE-2012-2876 N/A 2012-09-26 Buffer overflow in the SSE2 optimization functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly ha…	N/A	—	2012-09-26
CVE-2012-2875 N/A 2012-09-26 Multiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 22.0.1229.79 allow remote attackers to have an unknown impact via a craft…	N/A	—	2012-09-26
CVE-2012-2874 N/A 2012-09-26 Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors …	N/A	—	2012-09-26
CVE-2012-4930 N/A 2012-09-15 The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products, can perform TLS encryption of compressed data without properly …	N/A	—	2012-09-15
CVE-2012-4929 N/A 2012-09-15 The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating t…	N/A	—	2012-09-15
CVE-2012-4909 N/A 2012-09-13 Google Chrome before 18.0.1025308 on Android allows remote attackers to obtain cookie information via a crafted application.	N/A	—	2012-09-13
CVE-2012-4908 N/A 2012-09-13 Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a …	N/A	—	2012-09-13
CVE-2012-4907 N/A 2012-09-13 Google Chrome before 18.0.1025308 on Android does not properly restrict access from JavaScript code to Android APIs, which allows remote attackers to have an u…	N/A	—	2012-09-13
CVE-2012-4906 N/A 2012-09-13 Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitive information via…	N/A	—	2012-09-13
CVE-2012-4905 N/A 2012-09-13 Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an …	N/A	—	2012-09-13
CVE-2012-4904 N/A 2012-09-13 Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecifie…	N/A	—	2012-09-13

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM