Vulnerabilities

Tracked app vulnerabilities

28,604 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,604
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-27

All CVEs 28,604 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,604 entries

CVE	Severity	KEV	Apps	Published
CVE-2022-20499 HIGH · vendor Android 2023-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-03-01
CVE-2022-20467 HIGH · vendor Android 2023-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-03-01
CVE-2022-42797 HIGH 7.8 Xcode 2023-02-27 An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges.	HIGH 7.8	—	Xcode	2023-02-27
CVE-2023-0941 HIGH 8.8 2023-02-22 Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C…	HIGH 8.8	—		2023-02-22
CVE-2023-0933 HIGH 8.8 2023-02-22 Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro…	HIGH 8.8	—		2023-02-22
CVE-2023-0932 HIGH 8.8 2023-02-22 Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in specific UI interact…	HIGH 8.8	—		2023-02-22
CVE-2023-0931 HIGH 8.8 2023-02-22 Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…	HIGH 8.8	—		2023-02-22
CVE-2023-0930 HIGH 8.8 2023-02-22 Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…	HIGH 8.8	—		2023-02-22
CVE-2023-0929 HIGH 8.8 2023-02-22 Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…	HIGH 8.8	—		2023-02-22
CVE-2023-0928 HIGH 8.8 2023-02-22 Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…	HIGH 8.8	—		2023-02-22
CVE-2023-0927 HIGH 8.8 2023-02-22 Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to po…	HIGH 8.8	—		2023-02-22
CVE-2023-24329 HIGH 7.5 2023-02-17 An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank charac…	HIGH 7.5	—		2023-02-17
CVE-2021-43529 CRITICAL 9.8 Mozilla Thunderbird 2023-02-16 Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3…	CRITICAL 9.8	—	Mozilla Thunderbird	2023-02-16
CVE-2023-21823 HIGH 7.8 KEV Windows 2023-02-14 Windows Graphics Component Remote Code Execution Vulnerability	HIGH 7.8	KEV	Windows	2023-02-14
CVE-2023-23376 HIGH 7.8 KEV Windows 2023-02-14 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	KEV	Windows	2023-02-14
CVE-2023-21822 HIGH 7.8 Windows 2023-02-14 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21820 HIGH 7.4 Windows 2023-02-14 Windows Distributed File System (DFS) Remote Code Execution Vulnerability	HIGH 7.4	—	Windows	2023-02-14
CVE-2023-21819 HIGH 7.5 Windows 2023-02-14 Windows Secure Channel Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21818 HIGH 7.5 Windows 2023-02-14 Windows Secure Channel Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21817 HIGH 7.8 Windows 2023-02-14 Windows Kerberos Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21816 HIGH 7.5 Windows 2023-02-14 Windows Active Directory Domain Services API Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21813 HIGH 7.5 Windows 2023-02-14 Windows Secure Channel Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21812 HIGH 7.8 Windows 2023-02-14 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21811 HIGH 7.5 Windows 2023-02-14 Windows iSCSI Service Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21805 HIGH 7.8 Windows 2023-02-14 Windows MSHTML Platform Remote Code Execution Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21804 HIGH 7.8 Windows 2023-02-14 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21803 CRITICAL 9.8 Windows 2023-02-14 Windows iSCSI Discovery Service Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2023-02-14
CVE-2023-21802 HIGH 7.8 Windows 2023-02-14 Windows Media Remote Code Execution Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21801 HIGH 7.8 Windows 2023-02-14 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21799 HIGH 8.8 Windows 2023-02-14 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	Windows	2023-02-14
CVE-2023-21798 HIGH 8.8 Windows 2023-02-14 Microsoft ODBC Driver Remote Code Execution Vulnerability	HIGH 8.8	—	Windows	2023-02-14
CVE-2023-21797 HIGH 8.8 Windows 2023-02-14 Microsoft ODBC Driver Remote Code Execution Vulnerability	HIGH 8.8	—	Windows	2023-02-14
CVE-2023-21721 MEDIUM 6.5 Microsoft OneNote 2023-02-14 Microsoft OneNote Elevation of Privilege Vulnerability	MEDIUM 6.5	—	Microsoft OneNote	2023-02-14
CVE-2023-21716 CRITICAL 9.8 2023-02-14 Microsoft Word Remote Code Execution Vulnerability	CRITICAL 9.8	—		2023-02-14
CVE-2023-21714 MEDIUM 5.5 2023-02-14 Microsoft Office Information Disclosure Vulnerability	MEDIUM 5.5	—		2023-02-14
CVE-2023-21702 HIGH 7.5 Windows 2023-02-14 Windows iSCSI Service Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21701 HIGH 7.5 Windows 2023-02-14 Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21700 HIGH 7.5 Windows 2023-02-14 Windows iSCSI Discovery Service Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21699 MEDIUM 5.3 Windows 2023-02-14 Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability	MEDIUM 5.3	—	Windows	2023-02-14
CVE-2023-21697 MEDIUM 6.2 Windows 2023-02-14 Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability	MEDIUM 6.2	—	Windows	2023-02-14
CVE-2023-21695 HIGH 7.5 Windows 2023-02-14 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21694 MEDIUM 6.8 Windows 2023-02-14 Windows Fax Service Remote Code Execution Vulnerability	MEDIUM 6.8	—	Windows	2023-02-14
CVE-2023-21693 MEDIUM 5.7 Windows 2023-02-14 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability	MEDIUM 5.7	—	Windows	2023-02-14
CVE-2023-21692 CRITICAL 9.8 Windows 2023-02-14 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2023-02-14
CVE-2023-21691 HIGH 7.5 Windows 2023-02-14 Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21690 CRITICAL 9.8 Windows 2023-02-14 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2023-02-14
CVE-2023-21689 CRITICAL 9.8 Windows 2023-02-14 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2023-02-14
CVE-2023-21688 HIGH 7.8 Windows 2023-02-14 NT OS Kernel Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21687 MEDIUM 5.5 Windows 2023-02-14 HTTP.sys Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2023-02-14
CVE-2023-21686 HIGH 8.8 Windows 2023-02-14 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	Windows	2023-02-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM