Vulnerabilities

Tracked app vulnerabilities

28,604 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,604
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-27

All CVEs 28,604 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,604 entries

CVE	Severity	KEV	Apps	Published
CVE-2023-21652 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21403 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21402 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21401 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21394 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21263 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21228 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21227 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21218 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21217 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21216 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21215 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21166 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21164 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21163 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-21162 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2022-48461 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2022-48459 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2022-48458 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2022-48457 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2022-48456 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2022-48455 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2022-48454 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2022-40507 CRITICAL · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2023-12-01
CVE-2022-22076 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-42917 HIGH 8.8 KEV iOS 2023-11-30 A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2.…	HIGH 8.8	KEV	iOS	2023-11-30
CVE-2023-42916 MEDIUM 6.5 KEV iOS 2023-11-30 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Pr…	MEDIUM 6.5	KEV	iOS	2023-11-30
CVE-2023-6351 HIGH 8.8 2023-11-29 Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (C…	HIGH 8.8	—		2023-11-29
CVE-2023-6350 HIGH 8.8 2023-11-29 Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (C…	HIGH 8.8	—		2023-11-29
CVE-2023-6348 HIGH 8.8 2023-11-29 Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit…	HIGH 8.8	—		2023-11-29
CVE-2023-6347 HIGH 8.8 2023-11-29 Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…	HIGH 8.8	—		2023-11-29
CVE-2023-6346 HIGH 8.8 2023-11-29 Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…	HIGH 8.8	—		2023-11-29
CVE-2023-6345 CRITICAL 9.6 KEV 2023-11-29 Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a s…	CRITICAL 9.6	KEV		2023-11-29
CVE-2023-6212 HIGH · vendor 2023-11-21 Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume tha…	HIGH · vendor	—		2023-11-21
CVE-2023-6209 MEDIUM · vendor 2023-11-21 Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. T…	MEDIUM · vendor	—		2023-11-21
CVE-2023-6208 HIGH · vendor 2023-11-21 When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboa…	HIGH · vendor	—		2023-11-21
CVE-2023-6207 HIGH 8.8 2023-11-21 Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.	HIGH 8.8	—		2023-11-21
CVE-2023-6206 MEDIUM · vendor 2023-11-21 The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact t…	MEDIUM · vendor	—		2023-11-21
CVE-2023-6205 MEDIUM · vendor 2023-11-21 It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability…	MEDIUM · vendor	—		2023-11-21
CVE-2023-6204 MEDIUM · vendor 2023-11-21 On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on t…	MEDIUM · vendor	—		2023-11-21
CVE-2023-6112 HIGH 8.8 2023-11-15 Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…	HIGH 8.8	—		2023-11-15
CVE-2023-5997 HIGH 8.8 2023-11-15 Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…	HIGH 8.8	—		2023-11-15
CVE-2023-43588 LOW 3.5 Zoom 2023-11-15 Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.	LOW 3.5	—	Zoom	2023-11-15
CVE-2023-43582 MEDIUM 5.5 2023-11-15 Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.	MEDIUM 5.5	—		2023-11-15
CVE-2023-39206 LOW 3.7 2023-11-14 Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.	LOW 3.7	—		2023-11-14
CVE-2023-39205 MEDIUM 4.3 2023-11-14 Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access.	MEDIUM 4.3	—		2023-11-14
CVE-2023-39204 MEDIUM 4.3 2023-11-14 Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.	MEDIUM 4.3	—		2023-11-14
CVE-2023-39199 MEDIUM 4.9 2023-11-14 Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access.	MEDIUM 4.9	—		2023-11-14
CVE-2023-36041 HIGH 7.8 2023-11-14 Microsoft Excel Remote Code Execution Vulnerability	HIGH 7.8	—		2023-11-14
CVE-2023-36037 HIGH 7.8 2023-11-14 Microsoft Excel Security Feature Bypass Vulnerability	HIGH 7.8	—		2023-11-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM