Vulnerabilities

Tracked app vulnerabilities

29,911 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 29,911
Actively exploited: 377
Publication window: 1997-01-01 → 2026-11-10

All CVEs 29,911 CISA KEV 377 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,911 entries

CVE	Severity	KEV	Apps	Published
CVE-2016-8441 HIGH · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-01-01
CVE-2016-8440 HIGH · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-01-01
CVE-2016-8439 HIGH · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-01-01
CVE-2016-8438 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8437 HIGH · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-01-01
CVE-2016-8436 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8435 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8434 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8433 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8432 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8431 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8430 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8429 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8428 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8427 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8426 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8425 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8424 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8423 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8422 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2016-8415 HIGH · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-01-01
CVE-2016-8412 HIGH · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-01-01
CVE-2016-8398 HIGH · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-01-01
CVE-2016-7042 HIGH · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-01-01
CVE-2016-5345 HIGH · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-01-01
CVE-2016-5180 HIGH · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-01-01
CVE-2016-5080 MEDIUM · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-01-01
CVE-2015-5706 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2015-3288 CRITICAL · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2017-01-01
CVE-2014-9420 MEDIUM · vendor Android 2017-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2017-01-01
CVE-2016-7297 HIGH 7.5 Microsoft Edge 2016-12-20 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2016-7296 HIGH 7.5 Microsoft Edge 2016-12-20 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2016-7291 HIGH 7.1 2016-12-20 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 S…	HIGH 7.1	—		2016-12-20
CVE-2016-7290 HIGH 7.1 2016-12-20 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 S…	HIGH 7.1	—		2016-12-20
CVE-2016-7288 HIGH 7.5 Microsoft Edge 2016-12-20 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2016-7287 HIGH 7.5 Microsoft Edge 2016-12-20 The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memor…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2016-7286 HIGH 7.5 Microsoft Edge 2016-12-20 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2016-7282 MEDIUM 6.1 Microsoft Edge 2016-12-20 Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject arbitrary web script …	MEDIUM 6.1	—	Microsoft Edge	2016-12-20
CVE-2016-7281 MEDIUM 5.3 Microsoft Edge 2016-12-20 The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspeci…	MEDIUM 5.3	—	Microsoft Edge	2016-12-20
CVE-2016-7280 MEDIUM 6.1 Microsoft Edge 2016-12-20 Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microso…	MEDIUM 6.1	—	Microsoft Edge	2016-12-20
CVE-2016-7279 HIGH 7.5 Microsoft Edge 2016-12-20 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…	HIGH 7.5	—	Microsoft Edge	2016-12-20
CVE-2016-7276 HIGH 7.1 2016-12-20 Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive informatio…	HIGH 7.1	—		2016-12-20
CVE-2016-7268 HIGH 7.1 2016-12-20 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint …	HIGH 7.1	—		2016-12-20
CVE-2016-7267 MEDIUM 5.5 2016-12-20 Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote attackers to execute arbitrary code via a cr…	MEDIUM 5.5	—		2016-12-20
CVE-2016-7266 HIGH 7.8 2016-12-20 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mi…	HIGH 7.8	—		2016-12-20
CVE-2016-7265 HIGH 7.1 2016-12-20 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePo…	HIGH 7.1	—		2016-12-20
CVE-2016-7264 HIGH 7.1 2016-12-20 Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to obtain sensitive in…	HIGH 7.1	—		2016-12-20
CVE-2016-7262 HIGH 7.8 KEV 2016-12-20 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted re…	HIGH 7.8	KEV		2016-12-20
CVE-2016-7206 MEDIUM 6.1 Microsoft Edge 2016-12-20 Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microso…	MEDIUM 6.1	—	Microsoft Edge	2016-12-20
CVE-2016-7181 HIGH 7.5 Microsoft Edge 2016-12-20 Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge M…	HIGH 7.5	—	Microsoft Edge	2016-12-20

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM