Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
27,728
Actively exploited
377
Publication window
2004-07-27 → 2026-11-11
All CVEs 27,728 CISA KEV 377 Public exploit 503 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all
CVE
CVE-2025-24097
MEDIUM 5.0
iOS macOS

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonom…
CVE-2025-24095
HIGH 7.6
iOS

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4. An app may be able to bypass Privac…
CVE-2024-54533
HIGH 7.0
macOS

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A…
CVE-2024-40864
LOW 2.7
macOS iOS

The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ve…
CVE-2025-27113
LOW · vendor
iOS macOS

[Apple libxml2] Parsing a file may lead to an unexpected app termination
CVE-2024-9681
MEDIUM · vendor
iOS macOS

[Apple curl] An input validation issue was addressed
CVE-2024-56171
HIGH · vendor
iOS macOS

[Apple libxml2] Parsing a file may lead to an unexpected app termination
CVE-2024-48958
HIGH · vendor
iOS macOS

[Apple libarchive] An input validation issue was addressed
CVE-2025-2857
CRITICAL 10.0
Mozilla Firefox

Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child proces…
CVE-2025-2783
HIGH 8.3 KEV
Chrome Google Chrome

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandb…
CVE-2024-54564
MEDIUM 6.5
iOS macOS

This issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, visionOS 1.3. A file received f…
CVE-2024-54551
HIGH 7.5
iOS macOS

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3…
CVE-2024-44305
HIGH 7.8
macOS

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.6. An app may be able to gain root privileges.
CVE-2024-44199
HIGH 7.1
macOS

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An app may be able to cause unexpected system ter…
CVE-2025-2476
HIGH 8.8
Chrome Google Chrome

Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…
CVE-2025-24185
MEDIUM 5.5
macOS

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3…
CVE-2024-54565
MEDIUM 6.2
macOS

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data.
CVE-2024-54559
MEDIUM 5.5
macOS

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data.
CVE-2024-54525
HIGH 8.8
iOS macOS

A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS …
CVE-2024-44276
HIGH 7.3
iOS

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and iPadOS 18.2. A user in a privileged netw…
CVE-2024-8176
HIGH 7.5
iOS macOS

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML docume…
CVE-2025-24201
CRITICAL 10.0 KEV
iOS macOS

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15…
CVE-2025-26633
HIGH 7.0 KEV
Windows

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-24993
HIGH 7.8 KEV
Windows

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2025-24082
HIGH 7.8
Microsoft Excel Microsoft Office Office

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-24081
HIGH 7.8
Microsoft Excel Microsoft Office Office

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-24079
HIGH 7.8
Microsoft Office Microsoft Word Office

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-24078
HIGH 7.0
Microsoft Office Microsoft Word Office

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-24075
HIGH 7.8
Microsoft Excel Microsoft Office Office

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-26645
CRITICAL · vendor
Windows

Remote Desktop Client Remote Code Execution Vulnerability
CVE-2025-26634
HIGH · vendor
Windows

Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-25008
HIGH · vendor
Windows

Windows Server Elevation of Privilege Vulnerability
CVE-2025-24997
HIGH · vendor
Windows

DirectX Graphics Kernel File Denial of Service Vulnerability
CVE-2025-24996
HIGH · vendor
Windows

NTLM Hash Disclosure Spoofing Vulnerability
CVE-2025-24995
HIGH · vendor
Windows

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2025-24994
HIGH · vendor
Windows

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
CVE-2025-24992
HIGH · vendor
Windows

Windows NTFS Information Disclosure Vulnerability
CVE-2025-24991
HIGH · vendor KEV
Windows

Windows NTFS Information Disclosure Vulnerability
CVE-2025-24988
HIGH · vendor
Windows

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2025-24987
HIGH · vendor
Windows

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2025-24985
HIGH · vendor KEV
Windows

Windows Fast FAT File System Driver Remote Code Execution Vulnerability
CVE-2025-24984
HIGH · vendor KEV
Windows

Windows NTFS Information Disclosure Vulnerability
CVE-2025-24983
HIGH · vendor KEV
Windows

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2025-24855
HIGH · vendor
iOS macOS

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is…
CVE-2025-24084
CRITICAL · vendor
Windows

Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability
CVE-2025-24076
HIGH · vendor
Windows

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
CVE-2025-24072
HIGH · vendor
Windows

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
CVE-2025-24071
HIGH · vendor
Windows

Microsoft Windows File Explorer Spoofing Vulnerability
CVE-2025-24067
HIGH · vendor
Windows

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
CVE-2025-24066
HIGH · vendor
Windows

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM