Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

2,721 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
2,721
Actively exploited
48
Publication window
2007-08-28 → 2026-11-10
All CVEs 2,721 CISA KEV 48 Public exploit 56 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

2,721 entries Critical Hide N/A Clear all
CVE
CVE-2025-22411
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-22410
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-22409
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-22408
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-22403
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0084
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0081
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0075
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0074
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-21379
CRITICAL · vendor
Windows

DHCP Client Service Remote Code Execution Vulnerability
CVE-2025-21376
CRITICAL · vendor
Windows

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2025-1020
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s…
CVE-2025-1017
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption a…
CVE-2025-1016
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bug…
CVE-2025-1009
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, …
CVE-2024-45569
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-24154
CRITICAL 9.1
iOS macOS

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, …
CVE-2025-24146
CRITICAL 9.8
macOS

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3…
CVE-2025-24102
CRITICAL 9.8
iOS macOS

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may b…
CVE-2025-24093
CRITICAL 9.8
macOS

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app ma…
CVE-2025-24085
CRITICAL 10.0 KEV
iOS macOS

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS…
CVE-2024-54542
CRITICAL 9.1
iOS macOS

An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, watchOS…
CVE-2024-54530
CRITICAL 9.1
iOS macOS

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofil…
CVE-2024-54512
CRITICAL 9.1
iOS

The issue was addressed by removing the relevant flags. This issue is fixed in iOS 18.2 and iPadOS 18.2, watchOS 11.2. A system binary could be used to fingerp…
CVE-2025-21311
CRITICAL · vendor
Windows

Windows NTLM V1 Elevation of Privilege Vulnerability
CVE-2025-21309
CRITICAL · vendor
Windows

Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2025-21307
CRITICAL · vendor
Windows

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2025-21298
CRITICAL · vendor
Windows

Windows OLE Remote Code Execution Vulnerability
CVE-2025-21297
CRITICAL · vendor
Windows

Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2025-21296
CRITICAL · vendor
Windows

BranchCache Remote Code Execution Vulnerability
CVE-2025-21295
CRITICAL · vendor
Windows

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
CVE-2025-21294
CRITICAL · vendor
Windows

Microsoft Digest Authentication Remote Code Execution Vulnerability
CVE-2025-0247
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s…
CVE-2024-49748
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-49747
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-43771
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-43770
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-43096
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-20154
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-54534
CRITICAL 9.8
iOS macOS

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18…
CVE-2024-54506
CRITICAL 9.8
macOS

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpect…
CVE-2024-54465
CRITICAL 9.8
macOS

A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges.
CVE-2024-44299
CRITICAL 9.8
iOS macOS

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unex…
CVE-2024-44242
CRITICAL 9.8
iOS macOS

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unex…
CVE-2024-44241
CRITICAL 9.8
iOS macOS

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unex…
CVE-2024-49112
CRITICAL 9.8
Windows

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2023-47100
CRITICAL · vendor
macOS

[Apple Perl] Multiple issues in Perl
CVE-2024-49132
CRITICAL · vendor
Windows

Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2024-49128
CRITICAL · vendor
Windows

Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2024-49127
CRITICAL · vendor
Windows

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM