Vulnerabilities

Tracked app vulnerabilities

3,840 CVEs affect a tracked app or OS (Medium, macOS). 9 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 3,840
Actively exploited: 9
Publication window: 2009-08-11 → 2026-11-10

All CVEs 3,840 CISA KEV 9 Public exploit 11 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

3,840 entries Medium macOS Clear all

CVE	Severity	KEV	Published
CVE-2022-3660 MEDIUM 4.3 2022-11-01 Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304.62 allowed a remote attacker to hide the contents of the Omnib…	MEDIUM 4.3	—	2022-11-01
CVE-2022-3444 MEDIUM 4.3 2022-11-01 Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a craf…	MEDIUM 4.3	—	2022-11-01
CVE-2022-3443 MEDIUM 4.3 2022-11-01 Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a craf…	MEDIUM 4.3	—	2022-11-01
CVE-2022-3318 MEDIUM 4.3 2022-11-01 Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS…	MEDIUM 4.3	—	2022-11-01
CVE-2022-3317 MEDIUM 4.3 2022-11-01 Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restric…	MEDIUM 4.3	—	2022-11-01
CVE-2022-3316 MEDIUM 4.3 2022-11-01 Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass security feature via a …	MEDIUM 4.3	—	2022-11-01
CVE-2022-3314 MEDIUM 6.5 2022-11-01 Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbo…	MEDIUM 6.5	—	2022-11-01
CVE-2022-3313 MEDIUM 6.5 2022-11-01 Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium …	MEDIUM 6.5	—	2022-11-01
CVE-2022-3312 MEDIUM 4.6 2022-11-01 Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restric…	MEDIUM 4.6	—	2022-11-01
CVE-2022-3311 MEDIUM 6.5 2022-11-01 Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox…	MEDIUM 6.5	—	2022-11-01
CVE-2022-3310 MEDIUM 6.5 2022-11-01 Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an appl…	MEDIUM 6.5	—	2022-11-01
CVE-2022-3309 MEDIUM 6.5 2022-11-01 Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in specific UI gesture…	MEDIUM 6.5	—	2022-11-01
CVE-2022-3201 MEDIUM 5.4 2022-09-26 Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to instal…	MEDIUM 5.4	—	2022-09-26
CVE-2022-3057 MEDIUM 6.5 2022-09-26 Inappropriate implementation in iframe Sandbox in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to leak cross-origin data via a crafted HTML p…	MEDIUM 6.5	—	2022-09-26
CVE-2022-3056 MEDIUM 6.5 2022-09-26 Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to bypass content security policy …	MEDIUM 6.5	—	2022-09-26
CVE-2022-3054 MEDIUM 6.5 2022-09-26 Insufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a craf…	MEDIUM 6.5	—	2022-09-26
CVE-2022-3053 MEDIUM 4.3 2022-09-26 Inappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52 allowed a remote attacker to restrict user navigation via a crafted…	MEDIUM 4.3	—	2022-09-26
CVE-2022-3048 MEDIUM 6.8 2022-09-26 Inappropriate implementation in Chrome OS lockscreen in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a local attacker to bypass lockscreen navigat…	MEDIUM 6.8	—	2022-09-26
CVE-2022-3047 MEDIUM 6.5 2022-09-26 Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious exten…	MEDIUM 6.5	—	2022-09-26
CVE-2022-3044 MEDIUM 6.5 2022-09-26 Inappropriate implementation in Site Isolation in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had compromised the renderer process to by…	MEDIUM 6.5	—	2022-09-26
CVE-2022-2861 MEDIUM 6.5 2022-09-26 Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extensi…	MEDIUM 6.5	—	2022-09-26
CVE-2022-2860 MEDIUM 6.5 2022-09-26 Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass cookie prefix restrictions via a crafte…	MEDIUM 6.5	—	2022-09-26
CVE-2022-2856 MEDIUM 6.5 KEV 2022-09-26 Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a …	MEDIUM 6.5	KEV	2022-09-26
CVE-2022-2622 MEDIUM 6.5 2022-08-12 Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download res…	MEDIUM 6.5	—	2022-08-12
CVE-2022-2619 MEDIUM 4.3 2022-08-12 Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious …	MEDIUM 4.3	—	2022-08-12
CVE-2022-2618 MEDIUM 6.5 2022-08-12 Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a…	MEDIUM 6.5	—	2022-08-12
CVE-2022-2616 MEDIUM 6.5 2022-08-12 Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extensio…	MEDIUM 6.5	—	2022-08-12
CVE-2022-2615 MEDIUM 6.5 2022-08-12 Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—	2022-08-12
CVE-2022-2612 MEDIUM 6.5 2022-08-12 Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process t…	MEDIUM 6.5	—	2022-08-12
CVE-2022-2611 MEDIUM 4.3 2022-08-12 Inappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker to spoof the contents of the Omnibo…	MEDIUM 4.3	—	2022-08-12
CVE-2022-2610 MEDIUM 6.5 2022-08-12 Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted H…	MEDIUM 6.5	—	2022-08-12
CVE-2022-2605 MEDIUM 6.5 2022-08-12 Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	MEDIUM 6.5	—	2022-08-12
CVE-2022-2479 MEDIUM 4.3 2022-07-28 Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a ma…	MEDIUM 4.3	—	2022-07-28
CVE-2022-2165 MEDIUM 4.3 2022-07-28 Insufficient data validation in URL formatting in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform domain spoofing via IDN homographs …	MEDIUM 4.3	—	2022-07-28
CVE-2022-2164 MEDIUM 6.3 2022-07-28 Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extensio…	MEDIUM 6.3	—	2022-07-28
CVE-2022-2160 MEDIUM 6.5 2022-07-28 Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious …	MEDIUM 6.5	—	2022-07-28
CVE-2022-1875 MEDIUM 4.3 2022-07-27 Inappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 4.3	—	2022-07-27
CVE-2022-1873 MEDIUM 6.5 2022-07-27 Insufficient policy enforcement in COOP in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—	2022-07-27
CVE-2022-1872 MEDIUM 4.3 2022-07-27 Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious exten…	MEDIUM 4.3	—	2022-07-27
CVE-2022-1871 MEDIUM 4.3 2022-07-27 Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious exte…	MEDIUM 4.3	—	2022-07-27
CVE-2022-1869 MEDIUM 6.5 2022-07-27 Type Confusion in V8 in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	MEDIUM 6.5	—	2022-07-27
CVE-2022-1868 MEDIUM 6.5 2022-07-27 Inappropriate implementation in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extensio…	MEDIUM 6.5	—	2022-07-27
CVE-2022-1867 MEDIUM 6.5 2022-07-27 Insufficient validation of untrusted input in Data Transfer in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass same origin policy via …	MEDIUM 6.5	—	2022-07-27
CVE-2022-1862 MEDIUM 6.5 2022-07-27 Inappropriate implementation in Extensions in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to…	MEDIUM 6.5	—	2022-07-27
CVE-2022-1858 MEDIUM 6.5 2022-07-27 Out of bounds read in DevTools in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform an out of bounds memory read via specific user inte…	MEDIUM 6.5	—	2022-07-27
CVE-2022-1637 MEDIUM 4.3 2022-07-26 Inappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to leak cross-origin data via a crafted HTML pag…	MEDIUM 4.3	—	2022-07-26
CVE-2022-1501 MEDIUM 6.5 2022-07-26 Inappropriate implementation in iframe in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—	2022-07-26
CVE-2022-1500 MEDIUM 6.5 2022-07-26 Insufficient data validation in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass content security policy via a crafted HTM…	MEDIUM 6.5	—	2022-07-26
CVE-2022-1499 MEDIUM 6.3 2022-07-26 Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted …	MEDIUM 6.3	—	2022-07-26
CVE-2022-1498 MEDIUM 4.3 2022-07-26 Inappropriate implementation in HTML Parser in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 4.3	—	2022-07-26

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM