Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,604 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,604
Actively exploited
374
Publication window
1997-01-01 → 2026-10-27
All CVEs 28,604 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,604 entries
CVE
CVE-2023-40123
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40121
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40120
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40117
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40116
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-34970
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33200
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33035
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33034
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33029
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33028
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33027
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33026
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-32820
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-32819
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-28540
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-24855
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-24853
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-24850
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-24849
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-24848
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-24847
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-24844
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-24843
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-22385
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21673
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21291
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21253
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21252
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21244
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-20819
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2022-28348
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-44828
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-5217
HIGH 8.8 KEV
Mozilla Thunderbird Firefox Microsoft Edge Mozilla Firefox +2

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap…
CVE-2023-5187
HIGH 8.8
Chrome Google Chrome

Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially …
CVE-2023-5186
HIGH 8.8
Chrome Google Chrome

Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to pot…
CVE-2023-5176
CRITICAL · vendor
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume tha…
CVE-2023-5174
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free a…
CVE-2023-5171
MEDIUM 6.5
Mozilla Thunderbird Mozilla Firefox

During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potent…
CVE-2023-5169
MEDIUM 6.5
Mozilla Thunderbird Mozilla Firefox

A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable…
CVE-2023-5168
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable …
CVE-2023-40435
MEDIUM 5.5
Xcode

This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials.
CVE-2022-20917
MEDIUM 4.3
Cisco Jabber Cisco Jabber

A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing feature of Cisco Jabber could allow an authenticated, remote attack…
CVE-2023-26369
HIGH 7.8 KEV
Adobe Acrobat Reader Adobe Acrobat Reader (64-bit)

Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerabil…
CVE-2023-4909
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to obfuscate security UI via a crafted HTML pag…
CVE-2023-4908
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML pa…
CVE-2023-4907
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate security UI via a crafted HTM…
CVE-2023-4906
MEDIUM 4.3
Chrome Google Chrome

Insufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTM…
CVE-2023-4905
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromi…
CVE-2023-4904
MEDIUM 4.3
Chrome Google Chrome

Insufficient policy enforcement in Downloads in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Enterprise policy restrictions via a c…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM