Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-13088
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13087
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13086
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13082
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13081
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13079
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-11092
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-11028
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-11017
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-11015
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-11014
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-11013
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0843
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0842
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0841
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0840
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0839
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0836
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0835
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0834
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0833
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0832
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0831
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0830
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-5122
HIGH 8.8
Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access vi… |
|
CVE-2017-5121
HIGH 8.8
Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary … |
|
CVE-2017-5117
MEDIUM 6.5
Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive in… |
|
CVE-2017-5115
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML p… |
|
CVE-2017-5112
HIGH 8.8
Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a cra… |
|
CVE-2017-5111
HIGH 8.8
A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruptio… |
|
CVE-2017-5110
MEDIUM 6.5
Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux,… |
|
CVE-2017-5109
MEDIUM 4.3
Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remo… |
|
CVE-2017-5108
HIGH 8.8
Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modif… |
|
CVE-2017-5107
MEDIUM 5.3
A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cr… |
|
CVE-2017-5106
MEDIUM 6.5
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform dom… |
|
CVE-2017-5105
MEDIUM 6.5
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform dom… |
|
CVE-2017-5104
MEDIUM 6.5
Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via… |
|
CVE-2017-5103
MEDIUM 4.3
Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensit… |
|
CVE-2017-5102
MEDIUM 4.3
Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potential… |
|
CVE-2017-5101
MEDIUM 6.5
Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of t… |
|
CVE-2017-5100
HIGH 8.8
A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTM… |
|
CVE-2017-5099
HIGH 8.8
Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privil… |
|
CVE-2017-5098
HIGH 8.8
A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory… |
|
CVE-2017-5097
HIGH 8.8
Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memor… |
|
CVE-2017-5095
HIGH 8.8
Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption v… |
|
CVE-2017-5094
MEDIUM 6.5
Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to poten… |
|
CVE-2017-5093
MEDIUM 6.5
Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote att… |
|
CVE-2017-5092
HIGH 8.8
Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform… |
|
CVE-2017-5091
HIGH 8.8
A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds… |
|
CVE-2017-5090
MEDIUM 6.5
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoofing via a crafted d… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.