Vulnerabilities

Tracked app vulnerabilities

1,406 CVEs affect a tracked app or OS (all severities, iOS). 29 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 1,406
Actively exploited: 29
Publication window: 2017-04-02 → 2026-11-09

All CVEs 1,406 CISA KEV 29 Public exploit 4 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

1,406 entries iOS Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2026-28819 MEDIUM 5.4 iOS macOS 2026-05-11 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sono…	MEDIUM 5.4	—	iOS macOS	2026-05-11
CVE-2026-23866 MEDIUM 4.3 2026-05-01 Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26…	MEDIUM 4.3	—		2026-05-01
CVE-2026-28950 MEDIUM 6.2 iOS 2026-04-22 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and…	MEDIUM 6.2	—	iOS	2026-04-22
CVE-2025-43210 MEDIUM 6.3 iOS macOS 2026-04-02 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, …	MEDIUM 6.3	—	iOS macOS	2026-04-02
CVE-2025-43202 HIGH 8.8 iOS macOS 2026-04-02 This issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6. Processing a file may lead to memo…	HIGH 8.8	—	iOS macOS	2026-04-02
CVE-2026-28895 MEDIUM 4.6 iOS 2026-03-25 The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. An attacker with physical access to an iOS device with Stolen De…	MEDIUM 4.6	—	iOS	2026-03-25
CVE-2026-28894 HIGH 7.5 iOS macOS 2026-03-25 A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.…	HIGH 7.5	—	iOS macOS	2026-03-25
CVE-2026-28886 MEDIUM 5.9 iOS macOS 2026-03-25 A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS S…	MEDIUM 5.9	—	iOS macOS	2026-03-25
CVE-2026-28882 MEDIUM 4.0 iOS macOS 2026-03-25 This issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visi…	MEDIUM 4.0	—	iOS macOS	2026-03-25
CVE-2026-28880 MEDIUM 6.5 iOS macOS 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15…	MEDIUM 6.5	—	iOS macOS	2026-03-25
CVE-2026-28879 MEDIUM 6.5 iOS macOS 2026-03-25 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequ…	MEDIUM 6.5	—	iOS macOS	2026-03-25
CVE-2026-28878 MEDIUM 6.5 macOS iOS 2026-03-25 A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.7, …	MEDIUM 6.5	—	macOS iOS	2026-03-25
CVE-2026-28877 MEDIUM 5.5 iOS macOS 2026-03-25 An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Sequo…	MEDIUM 5.5	—	iOS macOS	2026-03-25
CVE-2026-28876 HIGH 7.5 iOS macOS 2026-03-25 A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 a…	HIGH 7.5	—	iOS macOS	2026-03-25
CVE-2026-28875 HIGH 7.5 iOS 2026-03-25 A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial…	HIGH 7.5	—	iOS	2026-03-25
CVE-2026-28874 HIGH 7.5 iOS 2026-03-25 The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination.	HIGH 7.5	—	iOS	2026-03-25
CVE-2026-28871 MEDIUM 4.3 iOS macOS 2026-03-25 A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4.…	MEDIUM 4.3	—	iOS macOS	2026-03-25
CVE-2026-28870 MEDIUM 5.5 iOS macOS 2026-03-25 An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.…	MEDIUM 5.5	—	iOS macOS	2026-03-25
CVE-2026-28868 MEDIUM 5.5 iOS macOS 2026-03-25 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5…	MEDIUM 5.5	—	iOS macOS	2026-03-25
CVE-2026-28867 MEDIUM 6.2 iOS macOS 2026-03-25 This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, mac…	MEDIUM 6.2	—	iOS macOS	2026-03-25
CVE-2026-28866 MEDIUM 6.2 iOS macOS 2026-03-25 This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.…	MEDIUM 6.2	—	iOS macOS	2026-03-25
CVE-2026-28865 HIGH 7.5 iOS macOS 2026-03-25 An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequ…	HIGH 7.5	—	iOS macOS	2026-03-25
CVE-2026-28864 LOW 3.3 iOS macOS 2026-03-25 This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, iOS 26.7.2 and iPad…	LOW 3.3	—	iOS macOS	2026-03-25
CVE-2026-28863 MEDIUM 6.5 iOS 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app…	MEDIUM 6.5	—	iOS	2026-03-25
CVE-2026-28861 MEDIUM 4.3 iOS macOS 2026-03-25 A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS T…	MEDIUM 4.3	—	iOS macOS	2026-03-25
CVE-2026-28859 MEDIUM 4.3 iOS macOS 2026-03-25 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4…	MEDIUM 4.3	—	iOS macOS	2026-03-25
CVE-2026-28858 CRITICAL 9.8 iOS 2026-03-25 A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected s…	CRITICAL 9.8	—	iOS	2026-03-25
CVE-2026-28857 MEDIUM 6.5 iOS macOS 2026-03-25 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processin…	MEDIUM 6.5	—	iOS macOS	2026-03-25
CVE-2026-28856 MEDIUM 4.6 iOS 2026-03-25 The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical a…	MEDIUM 4.6	—	iOS	2026-03-25
CVE-2026-28855 HIGH 7.5 macOS iOS 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3. An app may be able to access…	HIGH 7.5	—	macOS iOS	2026-03-25
CVE-2026-28852 MEDIUM 5.5 iOS macOS 2026-03-25 A stack overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.…	MEDIUM 5.5	—	iOS macOS	2026-03-25
CVE-2026-28833 MEDIUM 6.2 iOS macOS 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. An app may be…	MEDIUM 6.2	—	iOS macOS	2026-03-25
CVE-2026-28822 MEDIUM 6.2 iOS macOS 2026-03-25 A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5,…	MEDIUM 6.2	—	iOS macOS	2026-03-25
CVE-2026-20698 HIGH 7.8 iOS macOS 2026-03-25 The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.…	HIGH 7.8	—	iOS macOS	2026-03-25
CVE-2026-20694 MEDIUM 5.5 macOS iOS 2026-03-25 This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sequoia 15.7.5, macOS…	MEDIUM 5.5	—	macOS iOS	2026-03-25
CVE-2026-20692 MEDIUM 5.3 iOS macOS 2026-03-25 A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 1…	MEDIUM 5.3	—	iOS macOS	2026-03-25
CVE-2026-20691 MEDIUM 4.3 iOS macOS 2026-03-25 An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 2…	MEDIUM 4.3	—	iOS macOS	2026-03-25
CVE-2026-20690 MEDIUM 6.5 iOS macOS 2026-03-25 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS…	MEDIUM 6.5	—	iOS macOS	2026-03-25
CVE-2026-20688 CRITICAL 9.3 iOS macOS 2026-03-25 A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS…	CRITICAL 9.3	—	iOS macOS	2026-03-25
CVE-2026-20687 HIGH 7.1 iOS macOS 2026-03-25 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequ…	HIGH 7.1	—	iOS macOS	2026-03-25
CVE-2026-20686 MEDIUM 5.3 iOS 2026-03-25 This issue was addressed with improved input validation. This issue is fixed in iOS 26.3 and iPadOS 26.3. An app may be able to access sensitive user data.	MEDIUM 5.3	—	iOS	2026-03-25
CVE-2026-20668 MEDIUM 5.5 macOS iOS 2026-03-25 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5…	MEDIUM 5.5	—	macOS iOS	2026-03-25
CVE-2026-20665 MEDIUM 6.5 iOS macOS 2026-03-25 This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS T…	MEDIUM 6.5	—	iOS macOS	2026-03-25
CVE-2026-20664 MEDIUM 4.3 iOS macOS 2026-03-25 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processin…	MEDIUM 4.3	—	iOS macOS	2026-03-25
CVE-2026-20657 MEDIUM 6.5 iOS macOS 2026-03-25 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequo…	MEDIUM 6.5	—	iOS macOS	2026-03-25
CVE-2026-20637 MEDIUM 6.2 macOS iOS 2026-03-25 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequ…	MEDIUM 6.2	—	macOS iOS	2026-03-25
CVE-2025-43534 MEDIUM 6.8 iOS 2026-03-25 A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physic…	MEDIUM 6.8	—	iOS	2026-03-25
CVE-2026-4424 HIGH 7.5 iOS macOS 2026-03-19 A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sl…	HIGH 7.5	—	iOS macOS	2026-03-19
CVE-2026-20643 MEDIUM 5.4 iOS macOS 2026-03-17 A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadO…	MEDIUM 5.4	—	iOS macOS	2026-03-17
CVE-2026-26133 HIGH 7.1 +10 2026-03-16 AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.	HIGH 7.1	—	+10	2026-03-16

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM