Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

29,068 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
29,068
Actively exploited
375
Publication window
1997-01-01 → 2026-11-04
All CVEs 29,068 CISA KEV 375 Public exploit 643 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,068 entries
CVE
CVE-2020-0784
HIGH · vendor
Windows

DirectX Elevation of Privilege Vulnerability
CVE-2020-0699
HIGH · vendor
Windows

Win32k Information Disclosure Vulnerability
CVE-2020-0687
CRITICAL · vendor
Windows

Microsoft Graphics Remote Code Execution Vulnerability
CVE-2020-6456
MEDIUM 6.5
Chrome Google Chrome

Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attacker to bypass site isolation via crafted cl…
CVE-2020-6455
HIGH 8.8
Chrome Google Chrome

Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6454
HIGH 8.8
Chrome Google Chrome

Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to potentially ex…
CVE-2020-6452
HIGH 8.8
Chrome Google Chrome

Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6451
HIGH 8.8
Chrome Google Chrome

Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6450
HIGH 8.8
Chrome Google Chrome

Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6448
HIGH 8.8
Chrome Google Chrome

Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6447
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to …
CVE-2020-6446
MEDIUM 6.5
Chrome Google Chrome

Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a craft…
CVE-2020-6445
MEDIUM 6.5
Chrome Google Chrome

Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a craft…
CVE-2020-6444
MEDIUM 6.3
Chrome Google Chrome

Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6443
HIGH 8.8
Chrome Google Chrome

Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to …
CVE-2020-6442
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2020-6441
MEDIUM 4.3
Chrome Google Chrome

Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.
CVE-2020-6440
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to …
CVE-2020-6439
HIGH 8.8
Chrome Google Chrome

Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.
CVE-2020-6438
MEDIUM 4.3
Chrome Google Chrome

Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension …
CVE-2020-6437
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application.
CVE-2020-6436
HIGH 8.8
Chrome Google Chrome

Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …
CVE-2020-6435
MEDIUM 4.3
Chrome Google Chrome

Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had compromised the renderer process to bypa…
CVE-2020-6434
HIGH 8.8
Chrome Google Chrome

Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6433
MEDIUM 4.3
Chrome Google Chrome

Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted …
CVE-2020-6432
MEDIUM 4.3
Chrome Google Chrome

Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted…
CVE-2020-6431
MEDIUM 4.3
Chrome Google Chrome

Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVE-2020-6430
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6423
HIGH 8.8
Chrome Google Chrome

Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-3651
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0082
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0081
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0080
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0079
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0078
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0077
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0076
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0075
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0073
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0072
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0071
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0070
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2056
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-19807
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-19532
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-19524
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-14135
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-14134
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-14132
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-14131
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM