Dave
- Known vulnerabilities
- 0
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- —
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Based on permissions only: no CVE data referenced for this app.
Known vulnerabilities (CVE)
No CVE is currently referenced in NVD for this app on its platform.
The absence of CVEs is not a security guarantee — it can also mean nobody has audited or published findings.
Context
Context
Description
Take your finances to the next level with Dave. You could pocket up to $5001 with ExtraCash® and so much more. Dave Membership Information 1Dave is not a bank. Banking services provided by Coastal Community Bank, Member FDIC. The Dave Debit Card is issued under a license from Mastercard®. ExtraCash amounts range from $25-$500, typically authorized within 5 minutes, with an overdraft fee equal to the greater of $5 or 5%. Multiple overdrafts may be required. Not all members qualify for ExtraCash and few qualify for $500. ExtraCash is repayable on demand. Must open an ExtraCash overdraft deposit account and Dave Checking account. Up to $5 monthly membership fee for ExtraCash, Income Opportunity Services, and Financial Management Services. Optional 1.5% fee for external debit card transfers. See dave.com. UP TO $500 IN 5 MIN OR LESS1 Remove extra stress with ExtraCash® up to $500. There’s no credit check, interest, or late fees. EXTRACASH 101 ExtraCash offers the ability to get between $25-500 when you’re in a pinch.1 The amount of money you can take (aka, your eligibility) refreshes daily.
Data collected and shared
Source: App Store · App Privacy · 7 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
FAQ
FAQ: Dave
Why are no CVEs listed for Dave?
No CVE is currently referenced in NVD for Dave (com.trydave.dave) with a iOS CPE configuration. Either none has been publicly disclosed, or none has been mapped yet. Absence of a CVE is not a security guarantee.
What is the latest known version of Dave?
The most recent version of Dave (com.trydave.dave) tracked by Appaloosa Scout is 4.6.0, published by Dave, Inc.