Skip to content
Appaloosa Scout

Vulnerabilities

Tracked app vulnerabilities

2,273 entries

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE
CVE-2026-20686
MEDIUM 5.3 Network

This issue was addressed with improved input validation. This issue is fixed in iOS 26.3 and iPadOS 26.3. An app may be able to access sensitive user data.

CVE-2026-20670
MEDIUM 5.5 Local

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to access…

CVE-2026-20668
MEDIUM 5.5 Local

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5…

CVE-2026-20665
MEDIUM 6.5 Network

This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS T…

CVE-2026-20664
MEDIUM 4.3 Network

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processin…

CVE-2026-20657
MEDIUM 6.5 Network

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequo…

CVE-2026-20651
MEDIUM 6.2 Local

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An…

CVE-2026-20637
MEDIUM 6.2 Local

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequ…

CVE-2026-20633
MEDIUM 5.5 Local

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be …

CVE-2026-20632
MEDIUM 5.3 Network

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to …

CVE-2026-20607
MEDIUM 4.0 Local

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may …

CVE-2025-43534
MEDIUM 6.8 Physical

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physic…

CVE-2026-3889
MEDIUM 6.5 Network 1 apps

Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.

CVE-2026-4728
MEDIUM 6.5 Network 1 apps

Spoofing issue in the Privacy: Anti-Tracking component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.

CVE-2025-66200
MEDIUM 5.4

[Apple apache] Multiple issues in Apache

CVE-2025-65082
MEDIUM 6.5

[Apple apache] Multiple issues in Apache

CVE-2025-55753
MEDIUM 7.5

[Apple apache] Multiple issues in Apache

CVE-2026-20643
MEDIUM 5.4 Network

A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadO…

CVE-2026-3784
MEDIUM 6.5 Network

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. Th…

CVE-2026-26123
MEDIUM 5.5 Local 2 apps

Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally.

CVE-2026-3783
MEDIUM 5.3

token leak with redirect and netrc

CVE-2025-39946
MEDIUM 5.5

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2024-43859
MEDIUM 5.5

Indexed via Android Security Bulletin; full NVD metadata pending.

CVE-2026-2804
MEDIUM 5.4 Network 1 apps

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

CVE-2026-2802
MEDIUM 4.2 Network 1 apps

Race condition in the JavaScript: GC component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

CVE-2026-20682
MEDIUM 5.3 Network

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker may be a…

CVE-2026-20680
MEDIUM 6.5 Local

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPad…

CVE-2026-20678
MEDIUM 5.5 Local

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An app may …

CVE-2026-20676
MEDIUM 5.3 Network

This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A we…

CVE-2026-20675
MEDIUM 5.5 Local

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS…

CVE-2026-20674
MEDIUM 4.6 Physical

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device …

CVE-2026-20673
MEDIUM 5.3 Network

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 2…

CVE-2026-20669
MEDIUM 5.5 Local

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.3. An app may be able to …

CVE-2026-20666
MEDIUM 5.5 Local

An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data.

CVE-2026-20662
MEDIUM 4.6 Physical

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An attacker with physical a…

CVE-2026-20661
MEDIUM 4.6 Physical

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker…

CVE-2026-20655
MEDIUM 5.5 Local

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker…

CVE-2026-20654
MEDIUM 5.5 Local

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.…

CVE-2026-20653
MEDIUM 5.5 Local

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 a…

CVE-2026-20648
MEDIUM 5.5 Local

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to access …

CVE-2026-20647
MEDIUM 5.5 Local

This issue was addressed with improved data protection. This issue is fixed in macOS Tahoe 26.3. An app may be able to access sensitive user data.

CVE-2026-20645
MEDIUM 4.6 Physical

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.…

CVE-2026-20644
MEDIUM 6.5 Network

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe …

CVE-2026-20640
MEDIUM 4.6 Physical

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3. An attacker with physical a…

CVE-2026-20638
MEDIUM 5.5 Local

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3. A user with Live Caller ID app extensions turned off could h…

CVE-2026-20636
MEDIUM 6.5 Network

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processin…

CVE-2026-20635
MEDIUM 4.3 Network

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe …

CVE-2026-20634
MEDIUM 5.5 Local

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, mac…

CVE-2026-20630
MEDIUM 5.5 Local

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to access protected user data.

CVE-2026-20629
MEDIUM 5.5 Local

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be able to access user-sensitive d…