Vulnerabilities
Tracked app vulnerabilities
2,726 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 2,726
- Actively exploited
- 48
- Publication window
- 2007-08-28 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-14073
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-6831
CRITICAL 9.8
A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. … |
|
CVE-2020-12395
CRITICAL 9.8
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed evidence of memory c… |
|
CVE-2020-0901
CRITICAL 9.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successf… |
|
CVE-2020-6471
CRITICAL 9.6
Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious exten… |
|
CVE-2020-6469
CRITICAL 9.6
Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious exten… |
|
CVE-2020-6466
CRITICAL 9.6
Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sand… |
|
CVE-2020-6465
CRITICAL 9.6
Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potential… |
|
CVE-2020-6462
CRITICAL 9.6
Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially per… |
|
CVE-2020-6461
CRITICAL 9.6
Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
|
CVE-2020-6457
CRITICAL 9.6
Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM… |
|
CVE-2020-3641
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0103
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0096
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-6825
CRITICAL 9.8
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these… |
|
CVE-2020-1020
Adobe Font Manager Library Remote Code Execution Vulnerability |
|
CVE-2020-0965
CRITICAL · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2020-0950
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0949
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0948
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0938
Adobe Font Manager Library Remote Code Execution Vulnerability |
|
CVE-2020-0910
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2020-0907
CRITICAL · vendor
Microsoft Graphics Components Remote Code Execution Vulnerability |
|
CVE-2020-0687
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2020-0073
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0072
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0071
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0070
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14131
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14114
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14113
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14112
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14111
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14110
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-10609
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-10588
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-10575
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-6814
CRITICAL 9.8
Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evidence of memory corruption and we presume … |
|
CVE-2020-0796
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S… |
|
CVE-2020-0883
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-0881
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-0869
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0809
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0807
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0801
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0684
CRITICAL · vendor
LNK Remote Code Execution Vulnerability |
|
CVE-2020-0032
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2317
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14098
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14097
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.