Vulnerabilities

Tracked app vulnerabilities

29,086 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 29,086
Actively exploited: 375
Publication window: 1997-01-01 → 2026-11-04

All CVEs 29,086 CISA KEV 375 Public exploit 644 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,086 entries

CVE	Severity	KEV	Apps	Published
CVE-2015-9023 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2015-9022 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2015-9021 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2015-9020 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2015-9015 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2015-9014 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2015-9013 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2015-9012 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2015-9011 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2015-9010 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2015-9009 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2015-9008 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2015-8871 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2015-7995 MEDIUM · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-06-01
CVE-2014-9967 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2014-9966 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9965 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9964 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9963 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9962 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9961 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2014-9960 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2014-9959 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9958 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9957 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9956 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9955 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9954 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9953 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2016-5178 CRITICAL 9.8 2017-05-23 Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact vi…	CRITICAL 9.8	—		2017-05-23
CVE-2016-5177 HIGH 8.8 2017-05-23 Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecif…	HIGH 8.8	—		2017-05-23
CVE-2016-7804 HIGH 7.8 7-Zip 2017-05-22 Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified …	HIGH 7.8	—	7-Zip	2017-05-22
CVE-2017-8769 MEDIUM 4.6 WhatsApp 2017-05-18 Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files (Audio, Documents, Images, Video, and Voice Notes) asso…	MEDIUM 4.6	—	WhatsApp	2017-05-18
CVE-2017-0252 CRITICAL 9.8 Microsoft Edge 2017-05-15 A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engi…	CRITICAL 9.8	—	Microsoft Edge	2017-05-15
CVE-2017-0223 CRITICAL 9.8 Microsoft Edge 2017-05-15 A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engi…	CRITICAL 9.8	—	Microsoft Edge	2017-05-15
CVE-2017-0605 N/A Android 2017-05-12 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it w…	N/A	—	Android	2017-05-12
CVE-2017-0281 HIGH 7.8 2017-05-12 Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project…	HIGH 7.8	—		2017-05-12
CVE-2017-0266 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0254 HIGH 7.8 2017-05-12 Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP…	HIGH 7.8	—		2017-05-12
CVE-2017-0241 MEDIUM 5.3 Microsoft Edge 2017-05-12 An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions i…	MEDIUM 5.3	—	Microsoft Edge	2017-05-12
CVE-2017-0240 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0238 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0236 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0235 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0234 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0233 HIGH 8.3 Microsoft Edge 2017-05-12 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 8.3	—	Microsoft Edge	2017-05-12
CVE-2017-0231 MEDIUM 4.3 Microsoft Edge 2017-05-12 A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka "Microsoft Browser Spoofing Vulnerability."	MEDIUM 4.3	—	Microsoft Edge	2017-05-12
CVE-2017-0230 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0229 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0228 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine …	HIGH 7.5	—	Microsoft Edge	2017-05-12

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM