Vulnerabilities

Tracked app vulnerabilities

3,505 CVEs affect a tracked app or OS (Medium, Windows). 21 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 3,505
Actively exploited: 21
Publication window: 2009-07-30 → 2026-09-29

All CVEs 3,505 CISA KEV 21 Public exploit 24 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

3,505 entries Medium Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2017-15391 MEDIUM 6.5 2018-02-07 Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation …	MEDIUM 6.5	—		2018-02-07
CVE-2017-15390 MEDIUM 6.5 2018-02-07 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a …	MEDIUM 6.5	—		2018-02-07
CVE-2017-15389 MEDIUM 6.5 2018-02-07 An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) vi…	MEDIUM 6.5	—		2018-02-07
CVE-2017-15386 MEDIUM 6.5 2018-02-07 Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted…	MEDIUM 6.5	—		2018-02-07
CVE-2018-0803 MEDIUM 4.2 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from one domain and injec…	MEDIUM 4.2	—	Microsoft Edge	2018-01-04
CVE-2018-0800 MEDIUM 5.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine h…	MEDIUM 5.3	—	Microsoft Edge	2018-01-04
CVE-2018-0780 MEDIUM 5.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…	MEDIUM 5.3	—	Microsoft Edge	2018-01-04
CVE-2018-0767 MEDIUM 5.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user'…	MEDIUM 5.3	—	Microsoft Edge	2018-01-04
CVE-2018-0766 MEDIUM 4.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…	MEDIUM 4.3	—	Microsoft Edge	2018-01-04
CVE-2017-1000460 MEDIUM 6.5 2018-01-03 In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of init_get_bits is ignored and get_ue_gol…	MEDIUM 6.5	—		2018-01-03
CVE-2017-11919 MEDIUM 5.3 Microsoft Edge 2017-12-12 ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Windows 1…	MEDIUM 5.3	—	Microsoft Edge	2017-12-12
CVE-2017-11877 MEDIUM 5.5 2017-11-15 Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsof…	MEDIUM 5.5	—		2017-11-15
CVE-2017-11872 MEDIUM 6.5 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restric…	MEDIUM 6.5	—	Microsoft Edge	2017-11-15
CVE-2017-11863 MEDIUM 6.1 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user in…	MEDIUM 6.1	—	Microsoft Edge	2017-11-15
CVE-2017-11844 MEDIUM 4.3 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's sy…	MEDIUM 4.3	—	Microsoft Edge	2017-11-15
CVE-2017-11803 MEDIUM 4.3 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's sy…	MEDIUM 4.3	—	Microsoft Edge	2017-11-15
CVE-2017-5117 MEDIUM 6.5 2017-10-27 Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive in…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5110 MEDIUM 6.5 2017-10-27 Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux,…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5109 MEDIUM 4.3 2017-10-27 Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remo…	MEDIUM 4.3	—		2017-10-27
CVE-2017-5107 MEDIUM 5.3 2017-10-27 A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cr…	MEDIUM 5.3	—		2017-10-27
CVE-2017-5106 MEDIUM 6.5 2017-10-27 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform dom…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5105 MEDIUM 6.5 2017-10-27 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform dom…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5104 MEDIUM 6.5 2017-10-27 Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5103 MEDIUM 4.3 2017-10-27 Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensit…	MEDIUM 4.3	—		2017-10-27
CVE-2017-5102 MEDIUM 4.3 2017-10-27 Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potential…	MEDIUM 4.3	—		2017-10-27
CVE-2017-5101 MEDIUM 6.5 2017-10-27 Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of t…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5094 MEDIUM 6.5 2017-10-27 Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to poten…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5093 MEDIUM 6.5 2017-10-27 Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote att…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5090 MEDIUM 6.5 2017-10-27 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoofing via a crafted d…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5089 MEDIUM 6.5 2017-10-27 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofing via a crafted d…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5086 MEDIUM 6.5 2017-10-27 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via …	MEDIUM 6.5	—		2017-10-27
CVE-2017-5067 MEDIUM 6.5 2017-10-27 An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5065 MEDIUM 4.7 2017-10-27 Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attacker to potentially c…	MEDIUM 4.7	—		2017-10-27
CVE-2017-5061 MEDIUM 5.3 2017-10-27 A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibo…	MEDIUM 5.3	—		2017-10-27
CVE-2017-8726 MEDIUM 4.3 Microsoft Edge 2017-10-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre…	MEDIUM 4.3	—	Microsoft Edge	2017-10-13
CVE-2017-11794 MEDIUM 4.3 Microsoft Edge 2017-10-13 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles…	MEDIUM 4.3	—	Microsoft Edge	2017-10-13
CVE-2015-1206 MEDIUM 5.5 2017-10-06 Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service (unpaged memory write and process crash) via a craf…	MEDIUM 5.5	—		2017-10-06
CVE-2017-8754 MEDIUM 4.2 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malici…	MEDIUM 4.2	—	Microsoft Edge	2017-09-13
CVE-2017-8739 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that the Microsoft…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-8736 MEDIUM 4.3 Microsoft Edge 2017-09-13 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Intern…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-8735 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user by redirecting the user to a speciall…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-8724 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way t…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-8723 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malici…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-8643 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to leave a malicious website open during user clipboa…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2014-4616 MEDIUM 5.9 2017-08-24 Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to re…	MEDIUM 5.9	—		2017-08-24
CVE-2017-8662 MEDIUM 4.3 Microsoft Edge 2017-08-08 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to disclose information due to how strings are validated in specific scenarios, aka "Microsoft E…	MEDIUM 4.3	—	Microsoft Edge	2017-08-08
CVE-2017-8659 MEDIUM 4.3 Microsoft Edge 2017-08-08 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system due to the Chakra scripting engine…	MEDIUM 4.3	—	Microsoft Edge	2017-08-08
CVE-2017-8652 MEDIUM 6.5 Microsoft Edge 2017-08-08 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft…	MEDIUM 6.5	—	Microsoft Edge	2017-08-08
CVE-2017-8650 MEDIUM 5.4 Microsoft Edge 2017-08-08 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to exploit a security feature bypass due to Microsoft Edge not properly enforcing same-origin po…	MEDIUM 5.4	—	Microsoft Edge	2017-08-08
CVE-2017-8644 MEDIUM 4.3 Microsoft Edge 2017-08-08 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft…	MEDIUM 4.3	—	Microsoft Edge	2017-08-08

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM