Vulnerabilities

Tracked app vulnerabilities

20,165 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 20,165
Actively exploited: 303
Publication window: 1997-01-01 → 2026-11-03

All CVEs 20,165 CISA KEV 303 Public exploit 567 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

20,165 entries Windows Clear all

CVE	Severity	KEV	Published
CVE-2012-0182 N/A 2012-10-09 Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code v…	N/A	—	2012-10-09
CVE-2012-5111 N/A 2012-10-09 Google Chrome before 22.0.1229.92 does not monitor for crashes of Pepper plug-ins, which has unspecified impact and remote attack vectors.	N/A	—	2012-10-09
CVE-2012-5110 N/A 2012-10-09 The compositor in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.	N/A	—	2012-10-09
CVE-2012-5109 N/A 2012-10-09 The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-…	N/A	—	2012-10-09
CVE-2012-5108 N/A 2012-10-09 Race condition in Google Chrome before 22.0.1229.92 allows remote attackers to execute arbitrary code via vectors related to audio devices.	N/A	—	2012-10-09
CVE-2012-2900 N/A 2012-10-09 Skia, as used in Google Chrome before 22.0.1229.92, does not properly render text, which allows remote attackers to cause a denial of service (application cras…	N/A	—	2012-10-09
CVE-2012-1150 N/A 2012-10-05 Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisio…	N/A	—	2012-10-05
CVE-2012-0845 N/A 2012-10-05 SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cau…	N/A	—	2012-10-05
CVE-2012-2897 HIGH 7.8 2012-09-26 The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gol…	HIGH 7.8	—	2012-09-26
CVE-2012-2896 N/A 2012-09-26 Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of service or possibly …	N/A	—	2012-09-26
CVE-2012-2895 N/A 2012-09-26 The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via v…	N/A	—	2012-09-26
CVE-2012-2894 N/A 2012-09-26 Google Chrome before 22.0.1229.79 does not properly handle graphics-context data structures, which allows remote attackers to cause a denial of service (applic…	N/A	—	2012-09-26
CVE-2012-2893 N/A 2012-09-26 Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspe…	N/A	—	2012-09-26
CVE-2012-2892 N/A 2012-09-26 Unspecified vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to bypass the pop-up blocker via unknown vectors.	N/A	—	2012-09-26
CVE-2012-2891 N/A 2012-09-26 The IPC implementation in Google Chrome before 22.0.1229.79 allows attackers to obtain potentially sensitive information about memory addresses via unspecified…	N/A	—	2012-09-26
CVE-2012-2890 N/A 2012-09-26 Use-after-free vulnerability in the PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly hav…	N/A	—	2012-09-26
CVE-2012-2889 N/A 2012-09-26 Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involv…	N/A	—	2012-09-26
CVE-2012-2888 N/A 2012-09-26 Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impac…	N/A	—	2012-09-26
CVE-2012-2887 N/A 2012-09-26 Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impac…	N/A	—	2012-09-26
CVE-2012-2886 N/A 2012-09-26 Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors relate…	N/A	—	2012-09-26
CVE-2012-2885 N/A 2012-09-26 Double free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact v…	N/A	—	2012-09-26
CVE-2012-2884 N/A 2012-09-26 Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.	N/A	—	2012-09-26
CVE-2012-2883 N/A 2012-09-26 Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors …	N/A	—	2012-09-26
CVE-2012-2882 N/A 2012-09-26 FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or po…	N/A	—	2012-09-26
CVE-2012-2881 N/A 2012-09-26 Google Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (DOM tree corruption) or possib…	N/A	—	2012-09-26
CVE-2012-2880 N/A 2012-09-26 Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors …	N/A	—	2012-09-26
CVE-2012-2879 N/A 2012-09-26 Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service (DOM topology corruption) via a crafted document.	N/A	—	2012-09-26
CVE-2012-2878 N/A 2012-09-26 Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impac…	N/A	—	2012-09-26
CVE-2012-2877 N/A 2012-09-26 The extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs, which allows remote attackers to cause a denial of service (a…	N/A	—	2012-09-26
CVE-2012-2876 N/A 2012-09-26 Buffer overflow in the SSE2 optimization functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly ha…	N/A	—	2012-09-26
CVE-2012-2875 N/A 2012-09-26 Multiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 22.0.1229.79 allow remote attackers to have an unknown impact via a craft…	N/A	—	2012-09-26
CVE-2012-2874 N/A 2012-09-26 Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors …	N/A	—	2012-09-26
CVE-2012-4930 N/A 2012-09-15 The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products, can perform TLS encryption of compressed data without properly …	N/A	—	2012-09-15
CVE-2012-4929 N/A 2012-09-15 The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating t…	N/A	—	2012-09-15
CVE-2012-4909 N/A 2012-09-13 Google Chrome before 18.0.1025308 on Android allows remote attackers to obtain cookie information via a crafted application.	N/A	—	2012-09-13
CVE-2012-4908 N/A 2012-09-13 Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a …	N/A	—	2012-09-13
CVE-2012-4907 N/A 2012-09-13 Google Chrome before 18.0.1025308 on Android does not properly restrict access from JavaScript code to Android APIs, which allows remote attackers to have an u…	N/A	—	2012-09-13
CVE-2012-4906 N/A 2012-09-13 Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitive information via…	N/A	—	2012-09-13
CVE-2012-4905 N/A 2012-09-13 Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an …	N/A	—	2012-09-13
CVE-2012-4904 N/A 2012-09-13 Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecifie…	N/A	—	2012-09-13
CVE-2012-4903 N/A 2012-09-13 Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitive information via…	N/A	—	2012-09-13
CVE-2012-2872 N/A 2012-08-31 Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote attackers to inject arbitrary web scrip…	N/A	—	2012-08-31
CVE-2012-2871 N/A 2012-08-31 libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL…	N/A	—	2012-08-31
CVE-2012-2870 N/A 2012-08-31 libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial…	N/A	—	2012-08-31
CVE-2012-2869 N/A 2012-08-31 Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to cause a denial of service or possibly have unspecified other im…	N/A	—	2012-08-31
CVE-2012-2868 N/A 2012-08-31 Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors …	N/A	—	2012-08-31
CVE-2012-2867 N/A 2012-08-31 The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.	N/A	—	2012-08-31
CVE-2012-2866 N/A 2012-08-31 Google Chrome before 21.0.1180.89 does not properly perform a cast of an unspecified variable during handling of run-in elements, which allows remote attackers…	N/A	—	2012-08-31
CVE-2012-2865 N/A 2012-08-31 Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via …	N/A	—	2012-08-31
CVE-2012-3980 N/A 2012-08-29 The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-ass…	N/A	—	2012-08-29

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM