Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

670 CVEs affect a tracked app or OS (Medium, Android). 5 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
670
Actively exploited
5
Publication window
2016-05-09 → 2026-11-02

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

670 entries Medium Android Clear all
CVE
CVE-2019-2043
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2018-11819
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2019-9970
MEDIUM 6.5

Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerable to an IDN homogr…

CVE-2019-2005
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2019-1677
MEDIUM 4.6

A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the applica…

CVE-2017-18009
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2016-6684
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2019-0622
MEDIUM · vendor

An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android Elevati…

CVE-2018-3986
MEDIUM 5.5

An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0. The…

CVE-2018-3988
MEDIUM 4.7

Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attac…

CVE-2018-9541
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2018-15543
MEDIUM 6.8

An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The FingerprintManager class for Biometric validation allows authenticati…

CVE-2018-15542
MEDIUM 6.4

An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The Passcode feature allows authentication bypass via runtime manipulatio…

CVE-2018-13042
MEDIUM 5.9

The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity com.agilebits.onepassword.filling.openyolo…

CVE-2018-9452
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2018-9488
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2018-9440
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2018-11270
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-15825
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-17689
MEDIUM 5.9

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.

CVE-2018-6849
MEDIUM 4.3

In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), th…

CVE-2016-10456
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2016-10448
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2016-10437
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2016-10428
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2016-10422
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2016-10415
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2016-10412
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2016-10381
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2016-10380
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-13247
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-13236
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-5754
MEDIUM 5.6

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker wit…

CVE-2017-5753
MEDIUM 5.6

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local u…

CVE-2017-0816
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-0815
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-9720
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-9677
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-9676
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-8281
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-8280
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-8277
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-8251
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-8250
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-8247
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-7616
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-12146
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-11040
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-11002
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2017-11001
MEDIUM · vendor

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM