Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 27,728
Actively exploited: 377
Publication window: 2004-07-27 → 2026-11-11

All CVEs 27,728 CISA KEV 377 Public exploit 503 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-43458 HIGH · vendor Windows 2024-09-10 Windows Networking Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2024-09-10
CVE-2024-43457 HIGH · vendor Windows 2024-09-10 Windows Setup and Deployment Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-09-10
CVE-2024-39894 HIGH · vendor macOS 2024-09-10 Microsoft Security Update Guide entry — NVD enrichira.	HIGH · vendor	—	macOS	2024-09-10
CVE-2024-38233 HIGH · vendor Windows 2024-09-10 Windows Networking Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-09-10
CVE-2024-38232 HIGH · vendor Windows 2024-09-10 Windows Networking Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-09-10
CVE-2023-4504 HIGH · vendor macOS 2024-09-10 Microsoft Security Update Guide entry — NVD enrichira.	HIGH · vendor	—	macOS	2024-09-10
CVE-2024-7652 HIGH 7.5 2024-09-06 An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an ex…	HIGH 7.5	—		2024-09-06
CVE-2024-8394 MEDIUM 6.5 Mozilla Thunderbird 2024-09-06 When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vuln…	MEDIUM 6.5	—	Mozilla Thunderbird	2024-09-06
CVE-2024-8362 HIGH 8.8 2024-09-03 Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…	HIGH 8.8	—		2024-09-03
CVE-2024-7970 HIGH 8.8 2024-09-03 Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C…	HIGH 8.8	—		2024-09-03
CVE-2024-8387 CRITICAL 9.8 2024-09-03 Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume tha…	CRITICAL 9.8	—		2024-09-03
CVE-2024-6232 HIGH · vendor 2024-09-03 There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing …	HIGH · vendor	—		2024-09-03
CVE-2024-45306 MEDIUM 4.5 iOS macOS 2024-09-02 Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cur…	MEDIUM 4.5	—	iOS macOS	2024-09-02
CVE-2024-40662 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-40659 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-40658 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-40657 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-40656 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-40655 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-40654 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-40652 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-40650 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-39432 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-39431 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-3655 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33060 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33057 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33054 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33052 CRITICAL · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2024-09-01
CVE-2024-33051 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33050 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33048 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33045 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33043 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33042 CRITICAL · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2024-09-01
CVE-2024-33038 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33035 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33034 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-33016 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-32896 HIGH · vendor KEV Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	KEV	Android	2024-09-01
CVE-2024-31336 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-23716 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-23365 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-23364 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-23362 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-23359 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-23358 HIGH · vendor Android 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-09-01
CVE-2024-8198 HIGH 8.8 2024-08-28 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit…	HIGH 8.8	—		2024-08-28
CVE-2024-8194 HIGH 8.8 2024-08-28 Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…	HIGH 8.8	—		2024-08-28
CVE-2024-8193 HIGH 8.8 2024-08-28 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit…	HIGH 8.8	—		2024-08-28

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM