Vulnerabilities

Tracked app vulnerabilities

3,488 CVEs affect a tracked app or OS (Medium, Windows). 21 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 3,488
Actively exploited: 21
Publication window: 2009-07-30 → 2026-09-29

All CVEs 3,488 CISA KEV 21 Public exploit 24 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

3,488 entries Medium Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2022-1306 MEDIUM 4.3 2022-07-25 Inappropriate implementation in compositing in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) vi…	MEDIUM 4.3	—		2022-07-25
CVE-2022-1146 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Resource Timing in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML …	MEDIUM 6.5	—		2022-07-23
CVE-2022-1139 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted …	MEDIUM 6.5	—		2022-07-23
CVE-2022-1138 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscur…	MEDIUM 6.5	—		2022-07-23
CVE-2022-1137 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to…	MEDIUM 6.5	—		2022-07-23
CVE-2022-1132 MEDIUM 6.1 2022-07-23 Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local attacker to bypass navigation restriction…	MEDIUM 6.1	—		2022-07-23
CVE-2022-1129 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omni…	MEDIUM 6.5	—		2022-07-23
CVE-2022-1128 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross…	MEDIUM 6.5	—		2022-07-23
CVE-2017-20052 MEDIUM 5.0 2022-06-16 A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads…	MEDIUM 5.0	—		2022-06-16
CVE-2022-29107 MEDIUM 5.5 2022-05-10 Microsoft Office Security Feature Bypass Vulnerability	MEDIUM 5.5	—		2022-05-10
CVE-2022-0807 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Autofill in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass navigation restrictions via a crafted HTML …	MEDIUM 6.5	—		2022-04-05
CVE-2022-0806 MEDIUM 6.5 2022-04-05 Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross…	MEDIUM 6.5	—		2022-04-05
CVE-2022-0804 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibo…	MEDIUM 6.5	—		2022-04-05
CVE-2022-0803 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox (URL ba…	MEDIUM 6.5	—		2022-04-05
CVE-2022-0802 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibo…	MEDIUM 6.5	—		2022-04-05
CVE-2022-0792 MEDIUM 6.5 2022-04-05 Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	MEDIUM 6.5	—		2022-04-05
CVE-2022-0462 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Scroll in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2022-04-05
CVE-2022-0461 MEDIUM 6.5 2022-04-05 Policy bypass in COOP in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to bypass iframe sandbox via a crafted HTML page.	MEDIUM 6.5	—		2022-04-05
CVE-2022-0455 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98.0.4758.80 allowed a remote attacker to spoof the contents of the Omnib…	MEDIUM 6.5	—		2022-04-05
CVE-2021-3733 MEDIUM · vendor 2022-03-10 There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects …	MEDIUM · vendor	—		2022-03-10
CVE-2022-24511 MEDIUM 5.5 2022-03-09 Microsoft Office Word Tampering Vulnerability	MEDIUM 5.5	—		2022-03-09
CVE-2022-0309 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML …	MEDIUM 6.5	—		2022-02-12
CVE-2022-0305 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0294 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to byp…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0292 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypa…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0291 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass sit…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0120 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a maliciou…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0118 MEDIUM 4.3 2022-02-12 Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially hide the contents of the Omnibox (URL …	MEDIUM 4.3	—		2022-02-12
CVE-2022-0117 MEDIUM 6.5 2022-02-12 Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2022-02-12
CVE-2022-0116 MEDIUM 4.3 2022-02-12 Inappropriate implementation in Compositing in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via…	MEDIUM 4.3	—		2022-02-12
CVE-2022-0113 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2022-02-12
CVE-2022-0112 MEDIUM 4.3 2022-02-12 Incorrect security UI in Browser UI in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to display missing URL or incorrect URL via a crafted URL.	MEDIUM 4.3	—		2022-02-12
CVE-2022-0111 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page.	MEDIUM 6.5	—		2022-02-12
CVE-2022-0110 MEDIUM 4.3 2022-02-12 Incorrect security UI in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted…	MEDIUM 4.3	—		2022-02-12
CVE-2022-0109 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a cra…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0108 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2022-02-12
CVE-2022-22716 MEDIUM 5.5 2022-02-09 Microsoft Excel Information Disclosure Vulnerability	MEDIUM 5.5	—		2022-02-09
CVE-2013-3900 MEDIUM · vendor KEV Windows 2022-01-11 WinVerifyTrust Signature Validation Vulnerability	MEDIUM · vendor	KEV	Windows	2022-01-11
CVE-2021-4068 MEDIUM 6.5 2021-12-23 Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-4059 MEDIUM 6.5 2021-12-23 Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-4054 MEDIUM 6.5 2021-12-23 Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-38022 MEDIUM 6.5 2021-12-23 Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML…	MEDIUM 6.5	—		2021-12-23
CVE-2021-38021 MEDIUM 6.5 2021-12-23 Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML …	MEDIUM 6.5	—		2021-12-23
CVE-2021-38020 MEDIUM 4.3 2021-12-23 Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omn…	MEDIUM 4.3	—		2021-12-23
CVE-2021-38019 MEDIUM 6.5 2021-12-23 Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-38018 MEDIUM 6.5 2021-12-23 Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-38010 MEDIUM 6.5 2021-12-23 Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had compromised the renderer process to by…	MEDIUM 6.5	—		2021-12-23
CVE-2021-38009 MEDIUM 6.5 2021-12-23 Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-43546 MEDIUM 4.3 2021-12-08 It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefo…	MEDIUM 4.3	—		2021-12-08
CVE-2021-43545 MEDIUM 6.5 2021-12-08 Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0,…	MEDIUM 6.5	—		2021-12-08

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM