Vulnerabilities

Tracked app vulnerabilities

29,206 CVEs affect a tracked app or OS (all severities, all platforms). 376 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 29,206
Actively exploited: 376
Publication window: 1997-01-01 → 2026-11-10

All CVEs 29,206 CISA KEV 376 Public exploit 644 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,206 entries

CVE	Severity	KEV	Apps	Published
CVE-2014-9936 CRITICAL · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-04-01
CVE-2014-9935 CRITICAL · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-04-01
CVE-2014-9934 CRITICAL · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-04-01
CVE-2014-9933 CRITICAL · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-04-01
CVE-2014-9932 CRITICAL · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-04-01
CVE-2014-9931 CRITICAL · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-04-01
CVE-2014-9922 HIGH · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-04-01
CVE-2014-4656 HIGH · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-04-01
CVE-2014-3145 HIGH · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-04-01
CVE-2014-2706 HIGH · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-04-01
CVE-2014-1739 MEDIUM · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-04-01
CVE-2014-0206 HIGH · vendor Android 2017-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-04-01
CVE-2014-9938 HIGH 8.8 Git 2017-03-20 contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code executio…	HIGH 8.8	—	Git	2017-03-20
CVE-2017-0151 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0150 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0145 HIGH 8.8 KEV Windows 2017-03-17 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…	HIGH 8.8	KEV	Windows	2017-03-17
CVE-2017-0144 HIGH 8.8 KEV Windows 2017-03-17 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…	HIGH 8.8	KEV	Windows	2017-03-17
CVE-2017-0141 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0140 MEDIUM 4.2 Microsoft Edge 2017-03-17 Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass…	MEDIUM 4.2	—	Microsoft Edge	2017-03-17
CVE-2017-0138 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0137 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0136 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0135 MEDIUM 4.2 Microsoft Edge 2017-03-17 Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass…	MEDIUM 4.2	—	Microsoft Edge	2017-03-17
CVE-2017-0134 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0133 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0132 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0131 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0105 MEDIUM 5.5 2017-03-17 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 S…	MEDIUM 5.5	—		2017-03-17
CVE-2017-0094 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0071 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0070 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0069 MEDIUM 4.3 Microsoft Edge 2017-03-17 Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability." This vulnerability is differen…	MEDIUM 4.3	—	Microsoft Edge	2017-03-17
CVE-2017-0068 MEDIUM 4.3 Microsoft Edge 2017-03-17 Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Edge Information D…	MEDIUM 4.3	—	Microsoft Edge	2017-03-17
CVE-2017-0067 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0066 MEDIUM 4.2 Microsoft Edge 2017-03-17 Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Security Feature Bypass…	MEDIUM 4.2	—	Microsoft Edge	2017-03-17
CVE-2017-0065 MEDIUM 4.3 Microsoft Edge 2017-03-17 Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Information Disclosur…	MEDIUM 4.3	—	Microsoft Edge	2017-03-17
CVE-2017-0053 HIGH 7.8 2017-03-17 Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word Viewer allow remot…	HIGH 7.8	—		2017-03-17
CVE-2017-0052 HIGH 7.8 2017-03-17 Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbit…	HIGH 7.8	—		2017-03-17
CVE-2017-0035 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0034 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in a way that en…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0033 MEDIUM 4.3 Microsoft Edge 2017-03-17 Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerabi…	MEDIUM 4.3	—	Microsoft Edge	2017-03-17
CVE-2017-0032 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0031 HIGH 7.8 2017-03-17 Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial o…	HIGH 7.8	—		2017-03-17
CVE-2017-0030 HIGH 7.8 2017-03-17 Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on ShareP…	HIGH 7.8	—		2017-03-17
CVE-2017-0029 MEDIUM 5.5 2017-03-17 Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a crafted …	MEDIUM 5.5	—		2017-03-17
CVE-2017-0027 MEDIUM 4.7 2017-03-17 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1 allow …	MEDIUM 4.7	—		2017-03-17
CVE-2017-0023 HIGH 7.5 Microsoft Edge 2017-03-17 The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute a…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0020 HIGH 7.8 2017-03-17 Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial…	HIGH 7.8	—		2017-03-17
CVE-2017-0019 HIGH 7.8 2017-03-17 Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft O…	HIGH 7.8	—		2017-03-17
CVE-2017-0017 MEDIUM 6.1 Microsoft Edge 2017-03-17 The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via …	MEDIUM 6.1	—	Microsoft Edge	2017-03-17

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM