Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-1993
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1992
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1991
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1988
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1987
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1986
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-6271
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-6268
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-6267
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-5839
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-5269
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-5268
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-13905
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-13904
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-13900
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11948
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11945
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11938
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11935
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11932
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11931
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11921
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11864
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11845
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11820
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11289
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11280
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11275
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11268
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11262
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-10879
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18009
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-17760
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2016-6684
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-6179
Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced… |
|
CVE-2018-6178
Eliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious ex… |
|
CVE-2018-6175
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via ID… |
|
CVE-2018-6174
Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
|
CVE-2018-6173
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via ID… |
|
CVE-2018-6172
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via ID… |
|
CVE-2018-6170
A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
|
CVE-2018-6169
Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwant… |
|
CVE-2018-6167
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via ID… |
|
CVE-2018-6166
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via ID… |
|
CVE-2018-6165
Incorrect handling of reloads in Navigation in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via… |
|
CVE-2018-6164
Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HT… |
|
CVE-2018-6163
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via ID… |
|
CVE-2018-6162
Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted … |
|
CVE-2018-6160
JavaScript alert handling in Prompts in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a craf… |
|
CVE-2018-6158
A race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.