Vulnerabilities

Tracked app vulnerabilities

29,911 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 29,911
Actively exploited: 377
Publication window: 1997-01-01 → 2026-11-10

All CVEs 29,911 CISA KEV 377 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,911 entries

CVE	Severity	KEV	Apps	Published
CVE-2014-9961 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2014-9960 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2014-9959 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9958 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9957 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9956 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9955 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9954 HIGH · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-06-01
CVE-2014-9953 CRITICAL · vendor Android 2017-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-06-01
CVE-2016-5178 CRITICAL 9.8 2017-05-23 Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact vi…	CRITICAL 9.8	—		2017-05-23
CVE-2016-5177 HIGH 8.8 2017-05-23 Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecif…	HIGH 8.8	—		2017-05-23
CVE-2016-7804 HIGH 7.8 7-Zip 2017-05-22 Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified …	HIGH 7.8	—	7-Zip	2017-05-22
CVE-2017-8769 MEDIUM 4.6 WhatsApp 2017-05-18 Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files (Audio, Documents, Images, Video, and Voice Notes) asso…	MEDIUM 4.6	—	WhatsApp	2017-05-18
CVE-2017-0252 CRITICAL 9.8 Microsoft Edge 2017-05-15 A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engi…	CRITICAL 9.8	—	Microsoft Edge	2017-05-15
CVE-2017-0223 CRITICAL 9.8 Microsoft Edge 2017-05-15 A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engi…	CRITICAL 9.8	—	Microsoft Edge	2017-05-15
CVE-2017-0605 N/A Android 2017-05-12 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it w…	N/A	—	Android	2017-05-12
CVE-2017-0281 HIGH 7.8 2017-05-12 Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project…	HIGH 7.8	—		2017-05-12
CVE-2017-0266 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0254 HIGH 7.8 2017-05-12 Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP…	HIGH 7.8	—		2017-05-12
CVE-2017-0241 MEDIUM 5.3 Microsoft Edge 2017-05-12 An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions i…	MEDIUM 5.3	—	Microsoft Edge	2017-05-12
CVE-2017-0240 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0238 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0236 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0235 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0234 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0233 HIGH 8.3 Microsoft Edge 2017-05-12 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 8.3	—	Microsoft Edge	2017-05-12
CVE-2017-0231 MEDIUM 4.3 Microsoft Edge 2017-05-12 A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka "Microsoft Browser Spoofing Vulnerability."	MEDIUM 4.3	—	Microsoft Edge	2017-05-12
CVE-2017-0230 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0229 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0228 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine …	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0227 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0224 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0221 HIGH 7.5 Microsoft Edge 2017-05-12 A vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This CVE ID is unique f…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0280 HIGH · vendor Windows 2017-05-09 Windows SMB Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0279 CRITICAL · vendor Windows 2017-05-09 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-05-09
CVE-2017-0278 CRITICAL · vendor Windows 2017-05-09 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-05-09
CVE-2017-0277 CRITICAL · vendor Windows 2017-05-09 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-05-09
CVE-2017-0276 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0275 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0274 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0273 HIGH · vendor Windows 2017-05-09 Windows SMB Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0272 CRITICAL · vendor Windows 2017-05-09 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-05-09
CVE-2017-0271 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0270 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0269 HIGH · vendor Windows 2017-05-09 Windows SMB Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0268 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0267 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0263 HIGH · vendor KEV Windows 2017-05-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2017-05-09
CVE-2017-0259 HIGH · vendor Windows 2017-05-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0258 HIGH · vendor Windows 2017-05-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM