Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
29,110
Actively exploited
375
Publication window
1997-01-01 → 2026-11-04
All CVEs 29,110 CISA KEV 375 Public exploit 644 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,110 entries
CVE
CVE-2019-2179
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2178
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2177
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2176
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2175
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2174
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2124
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2123
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2115
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2108
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2103
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10541
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10534
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10533
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10531
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10529
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10524
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10522
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10515
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10512
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10505
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10504
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10496
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10495
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10491
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-10488
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-6240
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2018-11891
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-5715
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2017-17768
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-14970
HIGH 7.8
VLC VLC media player

A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv …
CVE-2019-14778
HIGH 7.8
VLC VLC media player

The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
CVE-2019-14777
HIGH 7.8
VLC VLC media player

The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
CVE-2019-14776
HIGH 7.8
VLC VLC media player

A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
CVE-2019-14534
MEDIUM 5.5
VLC VLC media player

In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a denial of service …
CVE-2019-14533
HIGH 7.8
VLC VLC media player

The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
CVE-2019-14535
HIGH 7.8
VLC VLC media player

A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a cra…
CVE-2019-14498
HIGH 7.8
VLC VLC media player

A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted C…
CVE-2019-14438
HIGH 7.8
VLC VLC media player

A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-base…
CVE-2019-14437
HIGH 7.8
VLC VLC media player

The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buf…
CVE-2019-15514
MEDIUM 5.3
Telegram Telegram

The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attac…
CVE-2019-1948
MEDIUM 5.9
Webex Meetings

A vulnerability in Cisco Webex Meetings Mobile (iOS) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by usin…
CVE-2019-1218
MEDIUM 5.4
Microsoft Outlook

A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages. An authenticated attacker could exploit t…
CVE-2019-1204
MEDIUM 4.3
Microsoft Office Microsoft Outlook Office

An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting…
CVE-2019-1201
HIGH 7.8
Microsoft Office Microsoft Word Office

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploi…
CVE-2019-1200
HIGH 7.8
Microsoft Office Microsoft Outlook Office

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exp…
CVE-2019-1197
MEDIUM 4.2
Microsoft Edge

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab…
CVE-2019-1196
MEDIUM 4.2
Microsoft Edge

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab…
CVE-2019-1195
MEDIUM 4.2
Microsoft Edge

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab…
CVE-2019-1193
MEDIUM 6.4
Microsoft Edge

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that …

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM