Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 27,728
Actively exploited: 377
Publication window: 2004-07-27 → 2026-11-11

All CVEs 27,728 CISA KEV 377 Public exploit 503 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-43091 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-43089 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-43088 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-43087 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-43086 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-43085 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-43084 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-43083 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-43082 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-43081 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-43080 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-43047 HIGH · vendor KEV Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	KEV	Android	2024-11-01
CVE-2024-40671 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-40661 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-40660 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-38424 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-38423 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-38422 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-38421 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-38415 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-38408 CRITICAL · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2024-11-01
CVE-2024-38405 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-38403 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-38402 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-34747 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-34729 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-34719 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-31337 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-29779 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-23715 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-23385 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-21455 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-20106 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-20104 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2023-35686 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2023-35659 HIGH · vendor Android 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-11-01
CVE-2024-10488 HIGH 8.8 2024-10-29 Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…	HIGH 8.8	—		2024-10-29
CVE-2024-10487 HIGH 8.8 2024-10-29 Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (…	HIGH 8.8	—		2024-10-29
CVE-2024-10468 MEDIUM 5.3 2024-10-29 Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability affects Firefox < 13…	MEDIUM 5.3	—		2024-10-29
CVE-2024-10467 HIGH 8.8 2024-10-29 Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume tha…	HIGH 8.8	—		2024-10-29
CVE-2024-10466 HIGH 7.5 2024-10-29 By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive. This vulnerability…	HIGH 7.5	—		2024-10-29
CVE-2024-10465 MEDIUM 6.5 2024-10-29 A clipboard "paste" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbir…	MEDIUM 6.5	—		2024-10-29
CVE-2024-10464 MEDIUM 6.5 2024-10-29 Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. This was addressed by introducing r…	MEDIUM 6.5	—		2024-10-29
CVE-2024-10463 MEDIUM 6.5 2024-10-29 Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Th…	MEDIUM 6.5	—		2024-10-29
CVE-2024-10462 MEDIUM 6.5 2024-10-29 Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird …	MEDIUM 6.5	—		2024-10-29
CVE-2024-10461 MEDIUM 6.1 2024-10-29 In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could al…	MEDIUM 6.1	—		2024-10-29
CVE-2024-10460 MEDIUM 5.3 2024-10-29 The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox < 132, Fire…	MEDIUM 5.3	—		2024-10-29
CVE-2024-10459 HIGH 7.5 2024-10-29 An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox <…	HIGH 7.5	—		2024-10-29
CVE-2024-10458 HIGH 7.5 2024-10-29 A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox < 132, Fire…	HIGH 7.5	—		2024-10-29
CVE-2024-44295 MEDIUM 5.5 macOS 2024-10-28 This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may b…	MEDIUM 5.5	—	macOS	2024-10-28

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM