Vulnerabilities

Tracked app vulnerabilities

29,911 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 29,911
Actively exploited: 377
Publication window: 1997-01-01 → 2026-11-10

All CVEs 29,911 CISA KEV 377 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

29,911 entries

CVE	Severity	KEV	Apps	Published
CVE-2016-3927 CRITICAL · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2016-10-01
CVE-2016-3926 CRITICAL · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2016-10-01
CVE-2016-3925 MEDIUM · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-10-01
CVE-2016-3924 MEDIUM · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-10-01
CVE-2016-3923 MEDIUM · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-10-01
CVE-2016-3922 MEDIUM · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-10-01
CVE-2016-3921 MEDIUM · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-10-01
CVE-2016-3920 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3918 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3917 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3916 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3915 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3914 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3913 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3912 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3911 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3910 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3909 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3908 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3905 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3903 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3902 MEDIUM · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-10-01
CVE-2016-3901 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3900 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3885 MEDIUM · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-10-01
CVE-2016-3882 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-3860 MEDIUM · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-10-01
CVE-2016-2059 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2016-0758 CRITICAL · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2016-10-01
CVE-2015-8956 MEDIUM · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-10-01
CVE-2015-8955 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2015-8951 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2015-8950 HIGH · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2016-10-01
CVE-2015-0572 MEDIUM · vendor Android 2016-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2016-10-01
CVE-2016-5176 MEDIUM 6.5 2016-09-29 Google Chrome before 53.0.2785.113 allows remote attackers to bypass the SafeBrowsing protection mechanism via unspecified vectors.	MEDIUM 6.5	—		2016-09-29
CVE-2016-7549 HIGH 8.8 2016-09-25 Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote atta…	HIGH 8.8	—		2016-09-25
CVE-2016-5175 HIGH 8.8 2016-09-25 Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service or possibly have other impact via unkno…	HIGH 8.8	—		2016-09-25
CVE-2016-5174 MEDIUM 6.5 2016-09-25 browser/ui/cocoa/browser_window_controller_private.mm in Google Chrome before 53.0.2785.113 does not process fullscreen toggle requests during a fullscreen tra…	MEDIUM 6.5	—		2016-09-25
CVE-2016-5173 HIGH 7.1 2016-09-25 The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load uni…	HIGH 7.1	—		2016-09-25
CVE-2016-5172 MEDIUM 6.5 2016-09-25 The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from a…	MEDIUM 6.5	—		2016-09-25
CVE-2016-5171 HIGH 8.8 2016-09-25 WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allow…	HIGH 8.8	—		2016-09-25
CVE-2016-5170 HIGH 8.8 2016-09-25 WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effec…	HIGH 8.8	—		2016-09-25
CVE-2016-4658 CRITICAL 9.8 Android 2016-09-25 xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbi…	CRITICAL 9.8	—	Android	2016-09-25
CVE-2016-4705 HIGH 7.8 Xcode 2016-09-18 otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vect…	HIGH 7.8	—	Xcode	2016-09-18
CVE-2016-4704 HIGH 7.8 Xcode 2016-09-18 otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vect…	HIGH 7.8	—	Xcode	2016-09-18
CVE-2016-3381 HIGH 7.8 2016-09-14 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers…	HIGH 7.8	—		2016-09-14
CVE-2016-3377 HIGH 7.5 Microsoft Edge 2016-09-14 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…	HIGH 7.5	—	Microsoft Edge	2016-09-14
CVE-2016-3374 MEDIUM 6.5 Microsoft Edge Windows 2016-09-14 The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to…	MEDIUM 6.5	—	Microsoft Edge Windows	2016-09-14
CVE-2016-3370 MEDIUM 6.5 Microsoft Edge Windows 2016-09-14 The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to…	MEDIUM 6.5	—	Microsoft Edge Windows	2016-09-14
CVE-2016-3366 MEDIUM 6.5 2016-09-14 Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046,…	MEDIUM 6.5	—		2016-09-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM