Vulnerabilities

Tracked app vulnerabilities

15,688 CVEs affect a tracked app or OS (all severities, all platforms). 286 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 15,688
Actively exploited: 286
Publication window: 2007-08-28 → 2026-08-19

All CVEs 15,688 CISA KEV 286 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

15,688 entries Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-31324 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31323 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31322 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31319 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31318 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31317 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31316 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31315 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31314 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31313 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31312 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31311 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-31310 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-23711 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-23698 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-23697 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-23696 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-23695 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-23363 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-20069 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-20068 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-20067 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-20066 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-20065 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-1065 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-0671 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2023-43556 CRITICAL 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	2024-06-01
CVE-2023-43551 CRITICAL 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	2024-06-01
CVE-2023-43542 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2023-43538 CRITICAL 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	2024-06-01
CVE-2023-21266 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2023-21114 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2023-21113 HIGH 2024-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-06-01
CVE-2024-36052 HIGH 7.5 1 app 2024-05-21 RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899.	HIGH 7.5	—	WinRAR	2024-05-21
CVE-2024-32465 HIGH 7.3 1 app 2024-05-14 Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with `git clone --no-loc…	HIGH 7.3	—	Git	2024-05-14
CVE-2024-32021 LOW 3.9 1 app 2024-05-14 Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that con…	LOW 3.9	—	Git	2024-05-14
CVE-2024-32020 LOW 3.9 1 app 2024-05-14 Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up hardlinking files into …	LOW 3.9	—	Git	2024-05-14
CVE-2024-32004 HIGH 8.1 1 app 2024-05-14 Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in s…	HIGH 8.1	—	Git	2024-05-14
CVE-2024-4777 HIGH 7.5 1 app 2024-05-14 Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume t…	HIGH 7.5	—	Mozilla Thunderbird	2024-05-14
CVE-2024-4770 HIGH 8.8 1 app 2024-05-14 When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115.…	HIGH 8.8	—	Mozilla Thunderbird	2024-05-14
CVE-2024-4769 MEDIUM 5.9 1 app 2024-05-14 When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses…	MEDIUM 5.9	—	Mozilla Thunderbird	2024-05-14
CVE-2024-4768 MEDIUM 6.1 1 app 2024-05-14 A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Fi…	MEDIUM 6.1	—	Mozilla Thunderbird	2024-05-14
CVE-2024-4767 MEDIUM 4.3 1 app 2024-05-14 If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disa…	MEDIUM 4.3	—	Mozilla Thunderbird	2024-05-14
CVE-2024-4367 HIGH 8.8 1 app 2024-05-14 A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Fire…	HIGH 8.8	—	Mozilla Thunderbird	2024-05-14
CVE-2024-27852 MEDIUM 6.5 2024-05-14 A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously…	MEDIUM 6.5	—	—	2024-05-14
CVE-2024-27847 MEDIUM 5.5 2024-05-14 This issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sono…	MEDIUM 5.5	—	—	2024-05-14
CVE-2024-27843 HIGH 7.8 2024-05-14 A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to …	HIGH 7.8	—	—	2024-05-14
CVE-2024-27842 HIGH 7.8 2024-05-14 The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to execute arbitrary code with kernel privileges.	HIGH 7.8	—	—	2024-05-14
CVE-2024-27841 MEDIUM 5.5 2024-05-14 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to disclose kerne…	MEDIUM 5.5	—	—	2024-05-14
CVE-2024-27839 LOW 3.3 2024-05-14 A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 17.5 and iPadOS 17.5. A malicious application may …	LOW 3.3	—	—	2024-05-14