Vulnerabilities

Tracked app vulnerabilities

3,840 CVEs affect a tracked app or OS (Medium, macOS). 9 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 3,840
Actively exploited: 9
Publication window: 2009-08-11 → 2026-11-10

All CVEs 3,840 CISA KEV 9 Public exploit 11 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

3,840 entries Medium macOS Clear all

CVE	Severity	KEV	Apps	Published
CVE-2022-1497 MEDIUM 6.5 2022-07-26 Inappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to spoof the contents of cross-origin websites via a cr…	MEDIUM 6.5	—		2022-07-26
CVE-2022-1495 MEDIUM 4.3 2022-07-26 Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted…	MEDIUM 4.3	—		2022-07-26
CVE-2022-1494 MEDIUM 6.1 2022-07-26 Insufficient data validation in Trusted Types in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass trusted types policy via a crafted HT…	MEDIUM 6.1	—		2022-07-26
CVE-2022-1492 MEDIUM 6.1 2022-07-26 Insufficient data validation in Blink Editing in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to inject arbitrary scripts or HTML via a craft…	MEDIUM 6.1	—		2022-07-26
CVE-2022-1488 MEDIUM 4.3 2022-07-26 Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extensio…	MEDIUM 4.3	—		2022-07-26
CVE-2022-1482 MEDIUM 6.5 2022-07-26 Inappropriate implementation in WebGL in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…	MEDIUM 6.5	—		2022-07-26
CVE-2022-1307 MEDIUM 4.3 2022-07-25 Inappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (…	MEDIUM 4.3	—		2022-07-25
CVE-2022-1306 MEDIUM 4.3 2022-07-25 Inappropriate implementation in compositing in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) vi…	MEDIUM 4.3	—		2022-07-25
CVE-2022-1146 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Resource Timing in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML …	MEDIUM 6.5	—		2022-07-23
CVE-2022-1139 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted …	MEDIUM 6.5	—		2022-07-23
CVE-2022-1138 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscur…	MEDIUM 6.5	—		2022-07-23
CVE-2022-1137 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to…	MEDIUM 6.5	—		2022-07-23
CVE-2022-1132 MEDIUM 6.1 2022-07-23 Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local attacker to bypass navigation restriction…	MEDIUM 6.1	—		2022-07-23
CVE-2022-1129 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omni…	MEDIUM 6.5	—		2022-07-23
CVE-2022-1128 MEDIUM 6.5 2022-07-23 Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross…	MEDIUM 6.5	—		2022-07-23
CVE-2022-32550 MEDIUM 4.8 2022-06-15 An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password servic…	MEDIUM 4.8	—		2022-06-15
CVE-2022-29107 MEDIUM 5.5 2022-05-10 Microsoft Office Security Feature Bypass Vulnerability	MEDIUM 5.5	—		2022-05-10
CVE-2022-29868 MEDIUM 5.5 1Password 2022-05-09 1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate…	MEDIUM 5.5	—	1Password	2022-05-09
CVE-2022-0807 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Autofill in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass navigation restrictions via a crafted HTML …	MEDIUM 6.5	—		2022-04-05
CVE-2022-0806 MEDIUM 6.5 2022-04-05 Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross…	MEDIUM 6.5	—		2022-04-05
CVE-2022-0804 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibo…	MEDIUM 6.5	—		2022-04-05
CVE-2022-0803 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox (URL ba…	MEDIUM 6.5	—		2022-04-05
CVE-2022-0802 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibo…	MEDIUM 6.5	—		2022-04-05
CVE-2022-0792 MEDIUM 6.5 2022-04-05 Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	MEDIUM 6.5	—		2022-04-05
CVE-2022-0462 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Scroll in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2022-04-05
CVE-2022-0461 MEDIUM 6.5 2022-04-05 Policy bypass in COOP in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to bypass iframe sandbox via a crafted HTML page.	MEDIUM 6.5	—		2022-04-05
CVE-2022-0455 MEDIUM 6.5 2022-04-05 Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98.0.4758.80 allowed a remote attacker to spoof the contents of the Omnib…	MEDIUM 6.5	—		2022-04-05
CVE-2022-24511 MEDIUM 5.5 2022-03-09 Microsoft Office Word Tampering Vulnerability	MEDIUM 5.5	—		2022-03-09
CVE-2022-0309 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML …	MEDIUM 6.5	—		2022-02-12
CVE-2022-0305 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0294 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to byp…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0292 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypa…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0291 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass sit…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0120 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a maliciou…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0118 MEDIUM 4.3 2022-02-12 Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially hide the contents of the Omnibox (URL …	MEDIUM 4.3	—		2022-02-12
CVE-2022-0117 MEDIUM 6.5 2022-02-12 Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2022-02-12
CVE-2022-0116 MEDIUM 4.3 2022-02-12 Inappropriate implementation in Compositing in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via…	MEDIUM 4.3	—		2022-02-12
CVE-2022-0113 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2022-02-12
CVE-2022-0112 MEDIUM 4.3 2022-02-12 Incorrect security UI in Browser UI in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to display missing URL or incorrect URL via a crafted URL.	MEDIUM 4.3	—		2022-02-12
CVE-2022-0111 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page.	MEDIUM 6.5	—		2022-02-12
CVE-2022-0110 MEDIUM 4.3 2022-02-12 Incorrect security UI in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted…	MEDIUM 4.3	—		2022-02-12
CVE-2022-0109 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a cra…	MEDIUM 6.5	—		2022-02-12
CVE-2022-0108 MEDIUM 6.5 2022-02-12 Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2022-02-12
CVE-2022-22716 MEDIUM 5.5 2022-02-09 Microsoft Excel Information Disclosure Vulnerability	MEDIUM 5.5	—		2022-02-09
CVE-2021-4068 MEDIUM 6.5 2021-12-23 Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-4059 MEDIUM 6.5 2021-12-23 Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-4054 MEDIUM 6.5 2021-12-23 Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-38022 MEDIUM 6.5 2021-12-23 Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML…	MEDIUM 6.5	—		2021-12-23
CVE-2021-38021 MEDIUM 6.5 2021-12-23 Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML …	MEDIUM 6.5	—		2021-12-23
CVE-2021-38020 MEDIUM 4.3 2021-12-23 Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omn…	MEDIUM 4.3	—		2021-12-23

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM