Vulnerabilities
Tracked app vulnerabilities
29,911 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,911
- Actively exploited
- 377
- Publication window
- 1997-01-01 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2015-9045
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9044
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9043
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9042
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9041
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9040
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9039
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9038
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9037
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9036
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9035
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9034
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-8596
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-8595
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-8592
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-5707
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-0575
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9980
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9979
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9978
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9977
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9975
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9974
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9973
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9968
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9731
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9411
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-8555
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy… |
|
CVE-2017-8549
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the u… |
|
CVE-2017-8548
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the u… |
|
CVE-2017-8545
MEDIUM 6.5
A spoofing vulnerability exists in when Microsoft Outlook for Mac does not sanitize html properly, aka "Microsoft Outlook for Mac Spoofing Vulnerability". |
|
CVE-2017-8530
MEDIUM 5.4
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with maliciou… |
|
CVE-2017-8529
MEDIUM 6.5
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to d… |
|
CVE-2017-8524
HIGH 7.5
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1… |
|
CVE-2017-8523
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with maliciou… |
|
CVE-2017-8522
HIGH 7.5
Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allo… |
|
CVE-2017-8521
HIGH 7.5
Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
|
CVE-2017-8520
HIGH 7.5
Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
|
CVE-2017-8513
A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Re… |
|
CVE-2017-8512
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8510
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8509
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8508
A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats, aka "Microsoft Office Secur… |
|
CVE-2017-8507
A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Office Memory Corrupt… |
|
CVE-2017-8506
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8504
MEDIUM 4.3
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch … |
|
CVE-2017-8499
HIGH 7.5
Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
|
CVE-2017-8498
MEDIUM 4.3
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read data not intended to be disclosed when Edge allows JavaScript XM… |
|
CVE-2017-8497
HIGH 7.5
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge i… |
|
CVE-2017-8496
HIGH 7.5
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge i… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.