Strava
- Known vulnerabilities
- 0
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- —
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +6/+10
1 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Based on permissions only: no CVE data referenced for this app.
Known vulnerabilities (CVE)
No CVE is currently referenced in NVD for this app on its platform.
The absence of CVEs is not a security guarantee — it can also mean nobody has audited or published findings.
Context
Context
Description
*App Store Award Winner -Apple Watch App of the Year* Strava makes fitness tracking social. We house your entire active journey in one spot – and you get to share it with friends. Here’s how: • Record everything – runs, rides, hikes, yoga and over 50+ other sport types. Think of Strava as the homebase of your movement. • See the full story of your strength training – Lifting in the gym weekly, doing HIIT workouts, and showing up to your group weight training classes? Use your favorite device or strength app and your exercises, sets, reps, weights and a muscle map show up automatically. Or start your strength journey today and see how quickly strength workouts become a key part of your active life. • Discover anywhere – our Routes tool uses de-identified Strava data to intelligently recommend popular routes based on your preferences. You can also build your own. • Uncover popular hiking Routes in your area, including local favorites, scenic trails, and long-distance climbs • Build a support network – Strava’s about celebrating movement. Here you’ll find your community and cheer each other on.
Data collected and shared
Source: App Store · App Privacy · 12 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
Other apps by this publisher
Apps published by Strava Inc.
FAQ
FAQ: Strava
Why are no CVEs listed for Strava?
No CVE is currently referenced in NVD for Strava (com.strava.stravaride) with a iOS CPE configuration. Either none has been publicly disclosed, or none has been mapped yet. Absence of a CVE is not a security guarantee.
What is the latest known version of Strava?
The most recent version of Strava (com.strava.stravaride) tracked by Appaloosa Scout is 474.0.2, published by Strava Inc..