Vulnerabilities
Tracked app vulnerabilities
18,214 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,214
- Actively exploited
- 296
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-43431
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe … |
|
CVE-2025-43419
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26… |
|
CVE-2025-43413
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2,… |
|
CVE-2025-43407
This issue was addressed with improved entitlements. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS… |
|
CVE-2025-43405
HIGH 7.5
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An … |
|
CVE-2025-43401
HIGH 7.5
A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A remote … |
|
CVE-2025-43399
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tah… |
|
CVE-2025-43387
HIGH 7.8
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. A malicious app may be able to g… |
|
CVE-2025-43386
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS… |
|
CVE-2025-43376
A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 2… |
|
CVE-2025-43373
HIGH 7.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able t… |
|
CVE-2025-43364
HIGH 7.8
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26.1. An app may be able t… |
|
CVE-2025-43361
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macO… |
|
CVE-2025-43338
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Sonoma 14.8.… |
|
CVE-2025-43323
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An … |
|
CVE-2025-6442
HIGH · vendor
[Apple Ruby] Multiple issues in ruby |
|
CVE-2024-49761
HIGH · vendor
[Apple Ruby] Multiple issues in ruby |
|
CVE-2025-43281
HIGH 7.8
The issue was addressed with improved authentication. This issue is fixed in macOS Sequoia 15.6. A local attacker may be able to elevate their privileges. |
|
CVE-2025-59243
HIGH 7.8
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59241
HIGH 7.8
Improper link resolution before file access ('link following') in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate pri… |
|
CVE-2025-59238
HIGH 7.8
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59236
HIGH 8.4
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59235
HIGH 7.1
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2025-59234
HIGH 7.8
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59233
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59232
HIGH 7.1
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
|
CVE-2025-59231
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59227
HIGH 7.8
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59226
HIGH 7.8
Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59225
HIGH 7.8
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59224
HIGH 7.8
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59223
HIGH 7.8
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59222
HIGH 7.8
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59221
HIGH 7.0
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2025-59210
HIGH 7.4
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
|
CVE-2025-59206
HIGH 7.4
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
|
CVE-2025-59189
HIGH 7.4
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2025-55698
HIGH 7.7
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network. |
|
CVE-2025-55697
HIGH 7.8
Heap-based buffer overflow in Azure Local allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55694
HIGH 7.8
Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55693
HIGH 7.4
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. |
|
CVE-2025-55691
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55690
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55689
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55688
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55686
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55684
HIGH 7.0
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-55677
HIGH 7.8
Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-53717
HIGH 7.0
Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges … |
|
CVE-2025-50174
HIGH 7.0
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.