Vulnerabilities

Tracked app vulnerabilities

28,604 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,604
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-27

All CVEs 28,604 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,604 entries

CVE	Severity	KEV	Apps	Published
CVE-2023-35684 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35683 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35682 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35681 CRITICAL · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2023-09-01
CVE-2023-35680 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35679 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35677 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35676 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35675 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35674 HIGH · vendor KEV Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	KEV	Android	2023-09-01
CVE-2023-35673 CRITICAL · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2023-09-01
CVE-2023-35671 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35670 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35669 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35667 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35666 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35665 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35664 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-35658 CRITICAL · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2023-09-01
CVE-2023-33021 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-33019 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-33016 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-33015 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-28584 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-28581 CRITICAL · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2023-09-01
CVE-2023-28573 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-28549 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-28538 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-21653 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-21646 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2022-40534 HIGH · vendor Android 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-09-01
CVE-2023-4572 HIGH 8.8 2023-08-29 Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…	HIGH 8.8	—		2023-08-29
CVE-2019-13690 CRITICAL 9.6 2023-08-25 Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilege escalation via a …	CRITICAL 9.6	—		2023-08-25
CVE-2019-13689 HIGH 7.8 2023-08-25 Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform arbitrary read/write via a malicious…	HIGH 7.8	—		2023-08-25
CVE-2022-4452 HIGH 8.8 Android 2023-08-25 Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit object corruption via a crafted…	HIGH 8.8	—	Android	2023-08-25
CVE-2023-40217 MEDIUM · vendor 2023-08-25 An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such as HT…	MEDIUM · vendor	—		2023-08-25
CVE-2023-38831 HIGH 7.8 KEV WinRAR 2023-08-23 RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because …	HIGH 7.8	KEV	WinRAR	2023-08-23
CVE-2023-41105 HIGH 7.5 2023-08-23 An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly…	HIGH 7.5	—		2023-08-23
CVE-2023-4431 HIGH 8.1 2023-08-23 Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted H…	HIGH 8.1	—		2023-08-23
CVE-2023-4430 HIGH 8.8 2023-08-23 Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…	HIGH 8.8	—		2023-08-23
CVE-2023-4429 HIGH 8.8 2023-08-23 Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…	HIGH 8.8	—		2023-08-23
CVE-2023-4428 HIGH 8.1 2023-08-23 Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTM…	HIGH 8.1	—		2023-08-23
CVE-2023-4427 HIGH 8.1 2023-08-23 Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML…	HIGH 8.1	—		2023-08-23
CVE-2022-48566 MEDIUM 5.9 2023-08-22 An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variab…	MEDIUM 5.9	—		2023-08-22
CVE-2022-48565 CRITICAL 9.8 2023-08-22 An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoi…	CRITICAL 9.8	—		2023-08-22
CVE-2022-48564 MEDIUM 6.5 2023-08-22 read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property Li…	MEDIUM 6.5	—		2023-08-22
CVE-2022-48560 HIGH 7.5 2023-08-22 A use-after-free exists in Python through 3.9 via heappushpop in heapq.	HIGH 7.5	—		2023-08-22
CVE-2023-4369 HIGH 8.8 2023-08-15 Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attacker who convinced a user to install a m…	HIGH 8.8	—		2023-08-15
CVE-2023-4368 HIGH 8.8 2023-08-15 Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious exten…	HIGH 8.8	—		2023-08-15
CVE-2023-4367 MEDIUM 6.5 2023-08-15 Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious exten…	MEDIUM 6.5	—		2023-08-15

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM