Vulnerabilities
Tracked app vulnerabilities
29,086 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,086
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2016-6915
CRITICAL · vendor
Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1… |
|
CVE-2016-6917
CRITICAL · vendor
Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA … |
|
CVE-2016-6916
CRITICAL · vendor
Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA… |
|
CVE-2014-9654
CRITICAL 9.8
The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calcul… |
|
CVE-2016-5168
HIGH 7.5
Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information. |
|
CVE-2016-4075
MEDIUM 6.1
Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL. |
|
CVE-2013-6662
MEDIUM 6.5
Google Chrome caches TLS sessions before certificate validation occurs. |
|
CVE-2017-0208
MEDIUM 4.3
An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who s… |
|
CVE-2017-0207
MEDIUM 6.5
Microsoft Outlook for Mac 2011 allows remote attackers to spoof web content via a crafted email with specific HTML tags, aka "Microsoft Browser Spoofing Vulner… |
|
CVE-2017-0205
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way th… |
|
CVE-2017-0204
MEDIUM 5.5
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to bypass the Office Prot… |
|
CVE-2017-0203
MEDIUM 4.3
A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. An attacke… |
|
CVE-2017-0200
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way th… |
|
CVE-2017-0194
MEDIUM 5.5
Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memor… |
|
CVE-2017-0106
HIGH 7.8
Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code o… |
|
CVE-2017-0093
HIGH 7.5
A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory in Microsoft browse… |
|
CVE-2013-6647
CRITICAL 9.8
A use-after-free in AnimationController::endAnimationUpdate in Google Chrome. |
|
CVE-2017-0211
HIGH · vendor
Windows OLE Elevation of Privilege Vulnerability |
|
CVE-2017-0192
HIGH · vendor
OpenType Font Driver Information Disclosure Vulnerability |
|
CVE-2017-0191
HIGH · vendor
Windows IPSec Denial of Service Vulnerability |
|
CVE-2017-0189
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0188
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2017-0186
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0185
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0184
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0183
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0182
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0181
CRITICAL · vendor
Hyper-V Remote Code Execution Vulnerability |
|
CVE-2017-0180
CRITICAL · vendor
Hyper-V Remote Code Execution Vulnerability |
|
CVE-2017-0179
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0178
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0167
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-0166
HIGH · vendor
LDAP Elevation of Privilege Vulnerability |
|
CVE-2017-0165
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2017-0164
HIGH · vendor
Active Directory Denial of Service Vulnerability |
|
CVE-2017-0163
CRITICAL · vendor
Hyper-V Remote Code Execution Vulnerability |
|
CVE-2017-0162
CRITICAL · vendor
Hyper-V Remote Code Execution Vulnerability |
|
CVE-2017-0159
HIGH · vendor
ADFS Security Feature Bypass Vulnerability |
|
CVE-2017-0158
CRITICAL · vendor
Scripting Engine Memory Corruption Vulnerability |
|
CVE-2017-0156
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0058
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2017-0562
HIGH 7.8
An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the cont… |
|
CVE-2017-2480
MEDIUM 6.5
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTune… |
|
CVE-2017-2391
MEDIUM 5.3
+2
An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3… |
|
CVE-2017-6426
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-6425
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-6424
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-6423
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0586
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-0585
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.