Vulnerabilities

Tracked app vulnerabilities

397 CVEs affect a tracked app or OS (Low, all platforms). 0 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 397
Actively exploited: 0
Publication window: 2015-05-21 → 2026-11-10

All CVEs 397 CISA KEV 0 Public exploit 2 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

397 entries Low Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2026-6312 LOW 3.1 2026-04-15 Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to lea…	LOW 3.1	—		2026-04-15
CVE-2025-43236 LOW 3.3 macOS 2026-04-02 A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An at…	LOW 3.3	—	macOS	2026-04-02
CVE-2026-28893 LOW 3.3 macOS 2026-03-25 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.4. A document may be written to a temporary file…	LOW 3.3	—	macOS	2026-03-25
CVE-2026-28864 LOW 3.3 iOS macOS 2026-03-25 This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, iOS 26.7.2 and iPad…	LOW 3.3	—	iOS macOS	2026-03-25
CVE-2026-20684 LOW 3.3 macOS 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.4. An app may bypass Gatekeeper checks.	LOW 3.3	—	macOS	2026-03-25
CVE-2026-4519 LOW 3.3 2026-03-20 The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior reject…	LOW 3.3	—		2026-03-20
CVE-2025-13462 LOW 3.3 2026-03-12 The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME …	LOW 3.3	—		2026-03-12
CVE-2026-3929 LOW 3.1 2026-03-11 Side-channel information leakage in ResourceTiming in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to leak cross-origin data via a crafted HT…	LOW 3.1	—		2026-03-11
CVE-2026-20681 LOW 3.3 macOS 2026-02-11 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 26.3. An app may be able to access infor…	LOW 3.3	—	macOS	2026-02-11
CVE-2026-20671 LOW 3.1 iOS macOS 2026-02-11 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS So…	LOW 3.1	—	iOS macOS	2026-02-11
CVE-2026-20663 LOW 3.3 iOS 2026-02-11 The issue was resolved by sanitizing logging. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An app may be able to enumerate a …	LOW 3.3	—	iOS	2026-02-11
CVE-2026-20656 LOW 3.3 iOS macOS 2026-02-11 A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to…	LOW 3.3	—	iOS macOS	2026-02-11
CVE-2026-20646 LOW 3.3 macOS 2026-02-11 A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to read sensitive location inf…	LOW 3.3	—	macOS	2026-02-11
CVE-2026-20642 LOW 2.4 iOS 2026-02-11 An input validation issue was addressed. This issue is fixed in iOS 26.3 and iPadOS 26.3. A person with physical access to an iOS device may be able to access …	LOW 2.4	—	iOS	2026-02-11
CVE-2026-20601 LOW 3.3 macOS 2026-02-11 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to monitor keystrokes without user …	LOW 3.3	—	macOS	2026-02-11
CVE-2025-31186 LOW 3.3 Xcode 2026-01-16 A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences.	LOW 3.3	—	Xcode	2026-01-16
CVE-2025-24090 LOW 3.3 iOS 2026-01-16 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app may be able to enumerate a user's insta…	LOW 3.3	—	iOS	2026-01-16
CVE-2024-54556 LOW 2.4 iOS 2026-01-16 This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. A user may be able to view restricted content from…	LOW 2.4	—	iOS	2026-01-16
CVE-2024-44210 LOW 3.3 macOS 2026-01-16 This issue was addressed with improved permissions checking. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data.	LOW 3.3	—	macOS	2026-01-16
CVE-2025-46279 LOW 3.3 iOS macOS 2025-12-17 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2…	LOW 3.3	—	iOS macOS	2025-12-17
CVE-2025-46277 LOW 3.3 iOS macOS 2025-12-17 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, watchOS 26.2. An app may be able…	LOW 3.3	—	iOS macOS	2025-12-17
CVE-2025-43531 LOW 3.1 iOS macOS 2025-12-17 A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS …	LOW 3.1	—	iOS macOS	2025-12-17
CVE-2025-43532 LOW 2.8 iOS macOS 2025-12-12 A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Seq…	LOW 2.8	—	iOS macOS	2025-12-12
CVE-2025-43522 LOW 3.3 macOS 2025-12-12 A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.3, mac…	LOW 3.3	—	macOS	2025-12-12
CVE-2025-43518 LOW 3.3 iOS macOS 2025-12-12 A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2,…	LOW 3.3	—	iOS macOS	2025-12-12
CVE-2025-43517 LOW 3.3 macOS 2025-12-12 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tah…	LOW 3.3	—	macOS	2025-12-12
CVE-2025-43516 LOW 3.3 macOS 2025-12-12 A session management issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. A user with …	LOW 3.3	—	macOS	2025-12-12
CVE-2025-43437 LOW 3.3 iOS 2025-12-12 An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 26.1 and iPadOS 26.1. An app may be able to fingerprin…	LOW 3.3	—	iOS	2025-12-12
CVE-2025-43410 LOW 2.4 macOS 2025-12-12 The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with …	LOW 2.4	—	macOS	2025-12-12
CVE-2025-43404 LOW 3.3 macOS 2025-12-12 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user da…	LOW 3.3	—	macOS	2025-12-12
CVE-2025-64787 LOW 3.3 2025-12-09 Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptograp…	LOW 3.3	—		2025-12-09
CVE-2025-64786 LOW 3.3 2025-12-09 Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptograp…	LOW 3.3	—		2025-12-09
CVE-2025-13640 LOW 3.5 2025-12-02 Inappropriate implementation in Passwords in Google Chrome prior to 143.0.7499.41 allowed a local attacker to bypass authentication via physical access to the …	LOW 3.5	—		2025-12-02
CVE-2025-31216 LOW 2.4 iOS 2025-11-21 The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may …	LOW 2.4	—	iOS	2025-11-21
CVE-2025-13015 LOW 3.4 Mozilla Firefox 2025-11-11 Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.	LOW 3.4	—	Mozilla Firefox	2025-11-11
CVE-2025-11219 LOW 3.1 2025-11-06 Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pa…	LOW 3.1	—		2025-11-06
CVE-2025-43442 LOW 3.3 iOS 2025-11-04 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be ab…	LOW 3.3	—	iOS	2025-11-04
CVE-2025-43423 LOW 2.0 iOS macOS 2025-11-04 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2…	LOW 2.0	—	iOS macOS	2025-11-04
CVE-2025-43408 LOW 2.4 macOS 2025-11-04 This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1.…	LOW 2.4	—	macOS	2025-11-04
CVE-2025-43395 LOW 3.3 macOS 2025-11-04 This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be …	LOW 3.3	—	macOS	2025-11-04
CVE-2025-43365 LOW 2.8 iOS 2025-11-04 A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26 and iPadOS 26. An unprivile…	LOW 2.8	—	iOS	2025-11-04
CVE-2025-43350 LOW 2.4 iOS 2025-11-04 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker may be able to view restricted con…	LOW 2.4	—	iOS	2025-11-04
CVE-2025-43309 LOW 2.4 iOS 2025-11-04 A logic issue was addressed with improved checks. This issue is fixed in iOS 26 and iPadOS 26. An attacker with physical access to an iOS device may be able to…	LOW 2.4	—	iOS	2025-11-04
CVE-2025-59284 LOW 3.3 Windows 2025-10-14 Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally.	LOW 3.3	—	Windows	2025-10-14
CVE-2025-43357 LOW 3.3 iOS macOS 2025-09-15 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia…	LOW 3.3	—	iOS macOS	2025-09-15
CVE-2025-43349 LOW 2.8 iOS macOS 2025-09-15 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia…	LOW 2.8	—	iOS macOS	2025-09-15
CVE-2025-43344 LOW 3.3 iOS macOS 2025-09-15 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, w…	LOW 3.3	—	iOS macOS	2025-09-15
CVE-2025-43328 LOW 3.3 macOS 2025-09-15 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data.	LOW 3.3	—	macOS	2025-09-15
CVE-2025-43301 LOW 3.3 macOS 2025-09-15 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 2…	LOW 3.3	—	macOS	2025-09-15
CVE-2025-43294 LOW 3.3 iOS macOS 2025-09-15 An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, …	LOW 3.3	—	iOS macOS	2025-09-15

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM