Vulnerabilities

Tracked app vulnerabilities

28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,627
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-30

All CVEs 28,627 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,627 entries

CVE	Severity	KEV	Apps	Published
CVE-2021-39632 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39630 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39629 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39628 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39627 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39626 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39625 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39623 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39622 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39621 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39620 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39618 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-31890 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-31889 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-31346 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-31345 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-30353 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-30319 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-30311 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-30308 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-30307 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-30301 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-30300 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-30287 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-30285 CRITICAL · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-01-01
CVE-2021-1049 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-0959 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-0643 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2020-0338 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-4079 HIGH 8.8 2021-12-23 Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packet…	HIGH 8.8	—		2021-12-23
CVE-2021-4078 HIGH 8.8 2021-12-23 Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4068 MEDIUM 6.5 2021-12-23 Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-4067 HIGH 8.8 2021-12-23 Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf…	HIGH 8.8	—		2021-12-23
CVE-2021-4066 HIGH 8.8 2021-12-23 Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4065 HIGH 8.8 2021-12-23 Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4064 HIGH 8.8 2021-12-23 Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf…	HIGH 8.8	—		2021-12-23
CVE-2021-4063 HIGH 8.8 2021-12-23 Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…	HIGH 8.8	—		2021-12-23
CVE-2021-4062 HIGH 8.8 2021-12-23 Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploi…	HIGH 8.8	—		2021-12-23
CVE-2021-4061 HIGH 8.8 2021-12-23 Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4059 MEDIUM 6.5 2021-12-23 Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-4058 HIGH 8.8 2021-12-23 Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4057 HIGH 8.8 2021-12-23 Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit hea…	HIGH 8.8	—		2021-12-23
CVE-2021-4056 HIGH 8.8 2021-12-23 Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4055 HIGH 8.8 2021-12-23 Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentia…	HIGH 8.8	—		2021-12-23
CVE-2021-4054 MEDIUM 6.5 2021-12-23 Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-4053 HIGH 8.8 2021-12-23 Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4052 HIGH 8.8 2021-12-23 Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially expl…	HIGH 8.8	—		2021-12-23
CVE-2021-38022 MEDIUM 6.5 2021-12-23 Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML…	MEDIUM 6.5	—		2021-12-23
CVE-2021-38021 MEDIUM 6.5 2021-12-23 Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML …	MEDIUM 6.5	—		2021-12-23
CVE-2021-38020 MEDIUM 4.3 2021-12-23 Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omn…	MEDIUM 4.3	—		2021-12-23

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM