Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-11960
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11922
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11279
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-11267
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-10840
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-8276
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-8248
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18332
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18331
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18330
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18329
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18328
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18327
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18326
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18324
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18323
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18322
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18321
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18320
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18319
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18160
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-18141
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-11004
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-15715
CRITICAL 9.8
Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to unauth… |
|
CVE-2018-19486
CRITICAL 9.8
Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the ru… |
|
CVE-2018-9535
HIGH 8.8
In ixheaacd_reset_acelp_data_fix of ixheaacd_lpc.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… |
|
CVE-2018-9534
HIGH 8.8
In ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exec… |
|
CVE-2018-9533
HIGH 8.8
In ixheaacd_dec_data_init of ixheaacd_create.c there is a possible out of write read due to a missing bounds check. This could lead to remote code execution wi… |
|
CVE-2018-9532
HIGH 8.8
In ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code … |
|
CVE-2018-9530
HIGH 8.8
In ixheaacd_tns_ar_filter_dec of ixheaacd_aac_tns.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execu… |
|
CVE-2018-9529
HIGH 8.8
In ixheaacd_individual_ch_stream of ixheaacd_channel.c there is a possible out of bounds write due to a missing bounds check. This could lead to remote code ex… |
|
CVE-2018-9528
HIGH 8.8
In ixheaacd_over_lap_add1_armv8 of ixheaacd_overlap_add1.s there is a possible out of bounds write due to a missing bounds check. This could lead to remote cod… |
|
CVE-2018-6083
HIGH 8.8
Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privil… |
|
CVE-2018-6082
MEDIUM 4.7
Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate int… |
|
CVE-2018-6081
MEDIUM 6.1
XSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension or open … |
|
CVE-2018-6080
MEDIUM 6.5
Lack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to … |
|
CVE-2018-6079
MEDIUM 6.5
Inappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross… |
|
CVE-2018-6078
MEDIUM 4.3
Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (… |
|
CVE-2018-6077
MEDIUM 6.5
Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak … |
|
CVE-2018-6076
MEDIUM 6.1
Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform a DOM based XSS attack … |
|
CVE-2018-6075
MEDIUM 6.5
Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a c… |
|
CVE-2018-6074
HIGH 8.8
Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML … |
|
CVE-2018-6073
HIGH 8.8
A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML p… |
|
CVE-2018-6072
HIGH 8.8
An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruptio… |
|
CVE-2018-6071
HIGH 8.8
An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
|
CVE-2018-6070
MEDIUM 6.1
Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extensio… |
|
CVE-2018-6069
MEDIUM 6.5
Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
|
CVE-2018-6068
MEDIUM 4.3
Object lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) vi… |
|
CVE-2018-6067
HIGH 8.8
Incorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
|
CVE-2018-6066
MEDIUM 6.5
Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data vi… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.