Vulnerabilities

Tracked app vulnerabilities

29,911 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 29,911
Actively exploited: 377
Publication window: 1997-01-01 → 2026-11-10

All CVEs 29,911 CISA KEV 377 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,911 entries

CVE	Severity	KEV	Apps	Published
CVE-2016-7229 HIGH 7.8 2016-11-10 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3,…	HIGH 7.8	—		2016-11-10
CVE-2016-7228 HIGH 7.8 2016-11-10 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Office Compatibility Pack …	HIGH 7.8	—		2016-11-10
CVE-2016-7227 LOW 3.1 Microsoft Edge 2016-11-10 The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of local files via unspe…	LOW 3.1	—	Microsoft Edge	2016-11-10
CVE-2016-7213 HIGH 7.8 2016-11-10 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Office Compatibility Pack …	HIGH 7.8	—		2016-11-10
CVE-2016-7209 MEDIUM 5.3 Microsoft Edge 2016-11-10 Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability."	MEDIUM 5.3	—	Microsoft Edge	2016-11-10
CVE-2016-7208 HIGH 7.5 Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7204 LOW 3.1 Microsoft Edge 2016-11-10 Microsoft Edge allows remote attackers to access arbitrary "My Documents" files via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerabilit…	LOW 3.1	—	Microsoft Edge	2016-11-10
CVE-2016-7203 HIGH 7.5 Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7202 HIGH 7.5 Microsoft Edge 2016-11-10 The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of serv…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7201 HIGH 8.8 KEV Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 8.8	KEV	Microsoft Edge	2016-11-10
CVE-2016-7200 HIGH 8.8 KEV Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 8.8	KEV	Microsoft Edge	2016-11-10
CVE-2016-7199 LOW 3.1 Microsoft Edge 2016-11-10 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the Same Origin Policy and obtain sensitive window-state informati…	LOW 3.1	—	Microsoft Edge	2016-11-10
CVE-2016-7198 HIGH 7.5 Microsoft Edge 2016-11-10 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7196 HIGH 7.5 Microsoft Edge 2016-11-10 Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via …	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7195 HIGH 7.5 Microsoft Edge 2016-11-10 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…	HIGH 7.5	—	Microsoft Edge	2016-11-10
CVE-2016-7256 CRITICAL · vendor KEV Windows 2016-11-08 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	KEV	Windows	2016-11-08
CVE-2016-7248 CRITICAL · vendor Windows 2016-11-08 Microsoft Video Control Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2016-11-08
CVE-2016-7247 HIGH · vendor Windows 2016-11-08 Secure Boot Component Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7246 HIGH · vendor Windows 2016-11-08 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7238 HIGH · vendor Windows 2016-11-08 Windows NTLM Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7237 HIGH · vendor Windows 2016-11-08 Local Security Authority Subsystem Service Denial of Service Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7226 HIGH · vendor Windows 2016-11-08 VHD Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7225 HIGH · vendor Windows 2016-11-08 VHD Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7224 HIGH · vendor Windows 2016-11-08 VHD Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7223 HIGH · vendor Windows 2016-11-08 VHD Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7222 HIGH · vendor Windows 2016-11-08 Task Scheduler Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7221 HIGH · vendor Windows 2016-11-08 Windows IME Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7218 HIGH · vendor Windows 2016-11-08 Windows Bowser.sys Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7217 HIGH · vendor Windows 2016-11-08 Media Foundation Memory Corruption Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7215 HIGH · vendor Windows 2016-11-08 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7214 HIGH · vendor Windows 2016-11-08 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7212 CRITICAL · vendor Windows 2016-11-08 Windows Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2016-11-08
CVE-2016-7210 HIGH · vendor Windows 2016-11-08 Open Type Font Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7205 CRITICAL · vendor Windows 2016-11-08 Windows Animation Manager Memory Corruption Vulnerability	CRITICAL · vendor	—	Windows	2016-11-08
CVE-2016-7184 HIGH · vendor Windows 2016-11-08 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-3343 HIGH · vendor Windows 2016-11-08 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-3342 HIGH · vendor Windows 2016-11-08 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-3340 HIGH · vendor Windows 2016-11-08 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-3338 HIGH · vendor Windows 2016-11-08 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-3335 HIGH · vendor Windows 2016-11-08 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-3334 HIGH · vendor Windows 2016-11-08 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-3333 HIGH · vendor Windows 2016-11-08 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-3332 HIGH · vendor Windows 2016-11-08 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-0026 HIGH · vendor Windows 2016-11-08 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2016-11-08
CVE-2016-7917 MEDIUM · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-11-01
CVE-2016-7916 HIGH · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-11-01
CVE-2016-7915 HIGH · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-11-01
CVE-2016-7914 HIGH · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-11-01
CVE-2016-7913 CRITICAL · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2016-11-01
CVE-2016-7912 CRITICAL · vendor Android 2016-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2016-11-01

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM