Vulnerabilities

Tracked app vulnerabilities

28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,627
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-30

All CVEs 28,627 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,627 entries

CVE	Severity	KEV	Apps	Published
CVE-2021-30342 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-30341 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-30340 HIGH · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-04-01
CVE-2021-30339 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-30338 HIGH · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-04-01
CVE-2021-30334 HIGH · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-04-01
CVE-2021-30281 HIGH · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-04-01
CVE-2021-25477 HIGH · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-04-01
CVE-2021-0707 HIGH · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-04-01
CVE-2021-0694 HIGH · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-04-01
CVE-2021-44683 HIGH 8.2 DuckDuckGo 2022-03-25 The DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the JavaScript window.open function (used to open a secondary browser wi…	HIGH 8.2	—	DuckDuckGo	2022-03-25
CVE-2018-25032 HIGH 7.5 2022-03-25 zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.	HIGH 7.5	—		2022-03-25
CVE-2020-20096 MEDIUM 6.5 2022-03-23 Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which results in URI spoofin…	MEDIUM 6.5	—		2022-03-23
CVE-2022-22608 HIGH 7.8 Xcode 2022-03-18 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected…	HIGH 7.8	—	Xcode	2022-03-18
CVE-2022-22607 HIGH 7.8 Xcode 2022-03-18 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected…	HIGH 7.8	—	Xcode	2022-03-18
CVE-2022-22606 HIGH 7.8 Xcode 2022-03-18 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected…	HIGH 7.8	—	Xcode	2022-03-18
CVE-2022-22605 HIGH 7.8 Xcode 2022-03-18 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected…	HIGH 7.8	—	Xcode	2022-03-18
CVE-2022-22604 HIGH 7.8 Xcode 2022-03-18 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected…	HIGH 7.8	—	Xcode	2022-03-18
CVE-2022-22603 HIGH 7.8 Xcode 2022-03-18 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected…	HIGH 7.8	—	Xcode	2022-03-18
CVE-2022-22602 HIGH 7.8 Xcode 2022-03-18 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected…	HIGH 7.8	—	Xcode	2022-03-18
CVE-2022-22601 HIGH 7.8 Xcode 2022-03-18 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected…	HIGH 7.8	—	Xcode	2022-03-18
CVE-2022-23960 MEDIUM 5.6 Android Windows 2022-03-13 Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared …	MEDIUM 5.6	—	Android Windows	2022-03-13
CVE-2022-26488 HIGH 7.0 2022-03-10 In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker t…	HIGH 7.0	—		2022-03-10
CVE-2021-3733 MEDIUM 6.5 2022-03-10 There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects …	MEDIUM 6.5	—		2022-03-10
CVE-2022-24511 MEDIUM 5.5 2022-03-09 Microsoft Office Word Tampering Vulnerability	MEDIUM 5.5	—		2022-03-09
CVE-2022-24525 HIGH · vendor Windows 2022-03-08 Windows Update Stack Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-24508 HIGH · vendor Windows 2022-03-08 Win32 File Enumeration Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-24507 HIGH · vendor Windows 2022-03-08 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-24505 HIGH · vendor Windows 2022-03-08 Windows ALPC Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-24503 HIGH · vendor Windows 2022-03-08 Remote Desktop Protocol Client Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-24502 HIGH · vendor Windows 2022-03-08 Windows HTML Platforms Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-24460 HIGH · vendor Windows 2022-03-08 Tablet Windows User Interface Application Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-24459 HIGH · vendor Windows 2022-03-08 Windows Fax and Scan Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-24455 HIGH · vendor Windows 2022-03-08 Windows CD-ROM Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-24454 HIGH · vendor Windows 2022-03-08 Windows Security Support Provider Interface Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23299 HIGH · vendor Windows 2022-03-08 Windows PDEV Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23298 HIGH · vendor Windows 2022-03-08 Windows NT OS Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23297 HIGH · vendor Windows 2022-03-08 Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23296 HIGH · vendor Windows 2022-03-08 Windows Installer Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23294 HIGH · vendor Windows 2022-03-08 Windows Event Tracing Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23293 HIGH · vendor Windows 2022-03-08 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23291 HIGH · vendor Windows 2022-03-08 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23290 HIGH · vendor Windows 2022-03-08 Windows Inking COM Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23288 HIGH · vendor Windows 2022-03-08 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23287 HIGH · vendor Windows 2022-03-08 Windows ALPC Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23286 HIGH · vendor Windows 2022-03-08 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23285 HIGH · vendor Windows 2022-03-08 Remote Desktop Client Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23284 HIGH · vendor Windows 2022-03-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23283 HIGH · vendor Windows 2022-03-08 Windows ALPC Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-03-08
CVE-2022-23281 HIGH · vendor Windows 2022-03-08 Windows Common Log File System Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-03-08

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM