Vulnerabilities

Tracked app vulnerabilities

29,068 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 29,068
Actively exploited: 375
Publication window: 1997-01-01 → 2026-11-04

All CVEs 29,068 CISA KEV 375 Public exploit 643 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,068 entries

CVE	Severity	KEV	Apps	Published
CVE-2020-6110 HIGH 8.8 2020-06-08 An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially…	HIGH 8.8	—		2020-06-08
CVE-2020-6109 CRITICAL 9.8 2020-06-08 An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat mess…	CRITICAL 9.8	—		2020-06-08
CVE-2020-13871 HIGH 7.5 Android 2020-06-06 SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.	HIGH 7.5	—	Android	2020-06-06
CVE-2020-6504 MEDIUM 4.3 2020-06-03 Insufficient policy enforcement in notifications in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass notification restrictions via a cr…	MEDIUM 4.3	—		2020-06-03
CVE-2020-6503 MEDIUM 6.5 2020-06-03 Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information fro…	MEDIUM 6.5	—		2020-06-03
CVE-2020-6502 MEDIUM 6.5 2020-06-03 Incorrect implementation in permissions in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.	MEDIUM 6.5	—		2020-06-03
CVE-2020-6501 MEDIUM 6.5 2020-06-03 Insufficient policy enforcement in CSP in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML pa…	MEDIUM 6.5	—		2020-06-03
CVE-2020-6500 MEDIUM 6.5 2020-06-03 Inappropriate implementation in interstitials in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) v…	MEDIUM 6.5	—		2020-06-03
CVE-2020-6499 MEDIUM 6.5 2020-06-03 Inappropriate implementation in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass AppCache security restrictions via a crafte…	MEDIUM 6.5	—		2020-06-03
CVE-2020-6498 MEDIUM 6.5 2020-06-03 Incorrect implementation in user interface in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to perform domain spoofing via a crafted HTM…	MEDIUM 6.5	—		2020-06-03
CVE-2020-6497 MEDIUM 6.5 2020-06-03 Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to perform domain spoofing via a crafted URI.	MEDIUM 6.5	—		2020-06-03
CVE-2020-6496 HIGH 8.8 2020-06-03 Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…	HIGH 8.8	—		2020-06-03
CVE-2020-6495 MEDIUM 6.5 2020-06-03 Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious exten…	MEDIUM 6.5	—		2020-06-03
CVE-2020-6494 MEDIUM 6.5 2020-06-03 Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) vi…	MEDIUM 6.5	—		2020-06-03
CVE-2020-6493 CRITICAL 9.6 2020-06-03 Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially pe…	CRITICAL 9.6	—		2020-06-03
CVE-2020-6453 HIGH 8.8 2020-06-03 Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …	HIGH 8.8	—		2020-06-03
CVE-2020-6419 HIGH 8.8 2020-06-03 Out of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-06-03
CVE-2011-2863 MEDIUM 6.5 2020-06-03 Insufficient policy enforcement in V8 in Google Chrome prior to 14.0.0.0 allowed a remote attacker to obtain potentially sensitive information from process mem…	MEDIUM 6.5	—		2020-06-03
CVE-2011-1805 HIGH 8.8 2020-06-03 Bad cast in CSS in Google Chrome prior to 11.0.0.0 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-06-03
CVE-2020-3676 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-3665 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-3663 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-3662 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-3661 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-3660 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-3658 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-3642 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-3635 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-3628 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-3626 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-3614 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-0121 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-0119 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-0118 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-0117 CRITICAL · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2020-06-01
CVE-2020-0116 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-0115 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-0114 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-0113 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2019-9460 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2019-14080 CRITICAL · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2020-06-01
CVE-2019-14076 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2019-14073 CRITICAL · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2020-06-01
CVE-2019-14062 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2019-14047 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2019-10597 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2017-9704 HIGH · vendor Android 2020-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2020-06-01
CVE-2020-13631 MEDIUM 5.5 iTunes 2020-05-27 SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.	MEDIUM 5.5	—	iTunes	2020-05-27
CVE-2020-13630 HIGH 7.0 iTunes 2020-05-27 ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.	HIGH 7.0	—	iTunes	2020-05-27
CVE-2020-6831 CRITICAL 9.8 2020-05-26 A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. …	CRITICAL 9.8	—		2020-05-26

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM