Vulnerabilities
Tracked app vulnerabilities
29,911 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,911
- Actively exploited
- 377
- Publication window
- 1997-01-01 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2015-9005
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9004
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-7555
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9952
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9951
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9950
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9949
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9948
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9947
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9946
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9945
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9944
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9943
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9942
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9941
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9930
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9929
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9928
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9927
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9926
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9925
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9924
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2014-9923
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-5043
HIGH 8.8
Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perfor… |
|
CVE-2017-5041
MEDIUM 4.3
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site v… |
|
CVE-2017-5038
MEDIUM 6.3
Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perfor… |
|
CVE-2017-5035
HIGH 8.1
Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site. |
|
CVE-2017-5034
HIGH 8.8
A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a… |
|
CVE-2017-5032
HIGH 8.8
PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially ex… |
|
CVE-2017-5031
HIGH 8.8
A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HT… |
|
CVE-2016-6915
CRITICAL · vendor
Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1… |
|
CVE-2016-6917
CRITICAL · vendor
Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA … |
|
CVE-2016-6916
CRITICAL · vendor
Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA… |
|
CVE-2014-9654
CRITICAL 9.8
The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calcul… |
|
CVE-2016-5168
HIGH 7.5
Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information. |
|
CVE-2016-4075
MEDIUM 6.1
Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL. |
|
CVE-2013-6662
MEDIUM 6.5
Google Chrome caches TLS sessions before certificate validation occurs. |
|
CVE-2017-0208
MEDIUM 4.3
An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who s… |
|
CVE-2017-0207
MEDIUM 6.5
Microsoft Outlook for Mac 2011 allows remote attackers to spoof web content via a crafted email with specific HTML tags, aka "Microsoft Browser Spoofing Vulner… |
|
CVE-2017-0205
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way th… |
|
CVE-2017-0204
MEDIUM 5.5
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to bypass the Office Prot… |
|
CVE-2017-0203
MEDIUM 4.3
A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. An attacke… |
|
CVE-2017-0200
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way th… |
|
CVE-2017-0194
MEDIUM 5.5
Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memor… |
|
CVE-2017-0106
HIGH 7.8
Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code o… |
|
CVE-2017-0093
HIGH 7.5
A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory in Microsoft browse… |
|
CVE-2013-6647
CRITICAL 9.8
A use-after-free in AnimationController::endAnimationUpdate in Google Chrome. |
|
CVE-2017-0211
HIGH · vendor
Windows OLE Elevation of Privilege Vulnerability |
|
CVE-2017-0192
HIGH · vendor
OpenType Font Driver Information Disclosure Vulnerability |
|
CVE-2017-0191
HIGH · vendor
Windows IPSec Denial of Service Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.