Vulnerabilities

Tracked app vulnerabilities

29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 29,110
Actively exploited: 375
Publication window: 1997-01-01 → 2026-11-04

All CVEs 29,110 CISA KEV 375 Public exploit 644 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,110 entries

CVE	Severity	KEV	Apps	Published
CVE-2017-11823 HIGH · vendor Windows 2017-10-10 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11818 HIGH · vendor Windows 2017-10-10 Windows Storage Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11817 HIGH · vendor Windows 2017-10-10 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11816 HIGH · vendor Windows 2017-10-10 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11815 HIGH · vendor Windows 2017-10-10 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11814 HIGH · vendor Windows 2017-10-10 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11785 HIGH · vendor Windows 2017-10-10 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11783 HIGH · vendor Windows 2017-10-10 Windows ALPC Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11782 HIGH · vendor Windows 2017-10-10 Windows SMB Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11781 HIGH · vendor Windows 2017-10-10 W - SMB - DOS Authenticated	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11780 HIGH · vendor Windows 2017-10-10 Windows SMB Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11779 CRITICAL · vendor Windows 2017-10-10 Windows DNSAPI Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-11772 HIGH · vendor Windows 2017-10-10 Microsoft Search Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11771 CRITICAL · vendor Windows 2017-10-10 Windows Search Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-11769 HIGH · vendor Windows 2017-10-10 TRIE Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11765 HIGH · vendor Windows 2017-10-10 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11763 CRITICAL · vendor Windows 2017-10-10 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-11762 CRITICAL · vendor Windows 2017-10-10 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2015-1206 MEDIUM 5.5 2017-10-06 Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service (unpaged memory write and process crash) via a craf…	MEDIUM 5.5	—		2017-10-06
CVE-2017-1000117 HIGH 8.8 Git 2017-10-05 A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on …	HIGH 8.8	—	Git	2017-10-05
CVE-2017-9714 CRITICAL · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-10-01
CVE-2017-9683 HIGH · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-10-01
CVE-2017-9075 HIGH · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-10-01
CVE-2017-7374 HIGH · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-10-01
CVE-2017-14496 HIGH · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-10-01
CVE-2017-11053 CRITICAL · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-10-01
CVE-2017-0827 HIGH · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-10-01
CVE-2017-0816 MEDIUM · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-10-01
CVE-2017-0815 MEDIUM · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-10-01
CVE-2017-0812 HIGH · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-10-01
CVE-2017-0811 CRITICAL · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-10-01
CVE-2017-0810 CRITICAL · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-10-01
CVE-2017-0809 CRITICAL · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-10-01
CVE-2017-0806 HIGH · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-10-01
CVE-2017-14867 HIGH · vendor Git 2017-09-29 Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands s…	HIGH · vendor	—	Git	2017-09-29
CVE-2016-10511 MEDIUM 5.9 X (anciennement Twitter) 2017-09-18 The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitti…	MEDIUM 5.9	—	X (anciennement Twitter)	2017-09-18
CVE-2017-8757 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8756 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8755 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8754 MEDIUM 4.2 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malici…	MEDIUM 4.2	—	Microsoft Edge	2017-09-13
CVE-2017-8753 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8752 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8751 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge ac…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8750 HIGH 7.5 Microsoft Edge 2017-09-13 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Intern…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8748 HIGH 7.5 Microsoft Edge 2017-09-13 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Intern…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8743 HIGH 7.8 2017-09-13 A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail…	HIGH 7.8	—		2017-09-13
CVE-2017-8742 HIGH 7.8 2017-09-13 A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 S…	HIGH 7.8	—		2017-09-13
CVE-2017-8741 HIGH 7.5 Microsoft Edge 2017-09-13 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Expl…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8740 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft …	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8739 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that the Microsoft…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM