Vulnerabilities
Tracked app vulnerabilities
2,721 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 2,721
- Actively exploited
- 48
- Publication window
- 2007-08-28 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-49697
CRITICAL · vendor
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-49696
CRITICAL · vendor
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-49695
CRITICAL · vendor
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-49735
CRITICAL · vendor
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability |
|
CVE-2025-48822
CRITICAL · vendor
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability |
|
CVE-2025-47981
CRITICAL · vendor
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
|
CVE-2025-47980
CRITICAL · vendor
Windows Imaging Component Information Disclosure Vulnerability |
|
CVE-2024-36357
CRITICAL · vendor
AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue |
|
CVE-2024-36350
CRITICAL · vendor
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue |
|
CVE-2025-6433
CRITICAL 9.8
If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would… |
|
CVE-2025-6427
CRITICAL 9.1
An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connectio… |
|
CVE-2025-6424
CRITICAL 9.8
A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.1… |
|
CVE-2025-49710
CRITICAL 9.8
An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4. |
|
CVE-2025-49709
CRITICAL 9.8
Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4. |
|
CVE-2025-47953
CRITICAL · vendor
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-47167
CRITICAL · vendor
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-47164
CRITICAL · vendor
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-47162
CRITICAL · vendor
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-33071
CRITICAL · vendor
Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability |
|
CVE-2025-33070
CRITICAL · vendor
Windows Netlogon Elevation of Privilege Vulnerability |
|
CVE-2025-32710
CRITICAL · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-29828
CRITICAL · vendor
Windows Schannel Remote Code Execution Vulnerability |
|
CVE-2025-31263
CRITICAL 9.1
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to corrupt coprocessor memory. |
|
CVE-2025-30466
This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. A w… |
|
CVE-2025-4918
CRITICAL 9.8
An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 1… |
|
CVE-2025-30386
CRITICAL · vendor
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-29967
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-29966
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-29833
CRITICAL · vendor
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability |
|
CVE-2025-30448
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 1… |
|
CVE-2025-30436
CRITICAL 9.1
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Sir… |
|
CVE-2025-4052
CRITICAL 9.8
Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestur… |
|
CVE-2025-4083
CRITICAL 9.1
A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level docu… |
|
CVE-2025-31201
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.… |
|
CVE-2025-31200
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, … |
|
CVE-2025-27491
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2025-27482
CRITICAL · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-27480
CRITICAL · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-26686
CRITICAL · vendor
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2025-26670
CRITICAL · vendor
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability |
|
CVE-2025-26663
CRITICAL · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2025-26416
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-22429
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-22423
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-45551
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-31194
CRITICAL 9.8
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A S… |
|
CVE-2025-31183
The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 1… |
|
CVE-2025-31182
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ve… |
|
CVE-2025-30465
A permissions issue was addressed with improved validation. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sequoia 15.7.2, macOS Sonoma 14.7.5… |
|
CVE-2025-30462
CRITICAL 9.8
A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. App… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.