Vulnerabilities

Tracked app vulnerabilities

399 CVEs affect a tracked app or OS (Low, all platforms). 0 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 399
Actively exploited: 0
Publication window: 2015-05-21 → 2026-11-10

All CVEs 399 CISA KEV 0 Public exploit 2 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

399 entries Low Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-40795 LOW 3.3 iOS macOS 2024-07-29 This issue was addressed with improved data protection. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, watchOS 10.6. An app may…	LOW 3.3	—	iOS macOS	2024-07-29
CVE-2024-40778 LOW 3.3 iOS macOS 2024-07-29 An authentication issue was addressed with improved state management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sono…	LOW 3.3	—	iOS macOS	2024-07-29
CVE-2024-27862 LOW 2.4 macOS 2024-07-29 A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.6. Enabling Lockdown Mode while setting up a Mac may cause F…	LOW 2.4	—	macOS	2024-07-29
CVE-2023-38546 LOW · vendor macOS 2024-06-11 Microsoft Security Update Guide entry — NVD enrichira.	LOW · vendor	—	macOS	2024-06-11
CVE-2024-27845 LOW 3.3 iOS 2024-06-10 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.5 and iPadOS 17.5. An app may be able to access Notes at…	LOW 3.3	—	iOS	2024-06-10
CVE-2024-27819 LOW 2.4 iOS 2024-06-10 The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access ma…	LOW 2.4	—	iOS	2024-06-10
CVE-2024-27799 LOW 3.3 iOS macOS 2024-06-10 This issue was addressed with additional entitlement checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Sonoma 14.5, mac…	LOW 3.3	—	iOS macOS	2024-06-10
CVE-2024-32021 LOW · vendor Git 2024-05-14 Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that con…	LOW · vendor	—	Git	2024-05-14
CVE-2024-32020 LOW · vendor Git 2024-05-14 Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up hardlinking files into …	LOW · vendor	—	Git	2024-05-14
CVE-2024-27839 LOW 3.3 iOS 2024-05-14 A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 17.5 and iPadOS 17.5. A malicious application may …	LOW 3.3	—	iOS	2024-05-14
CVE-2024-27837 LOW 3.3 macOS 2024-05-14 A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. A local attacker may gain access to Keycha…	LOW 3.3	—	macOS	2024-05-14
CVE-2024-27835 LOW 2.4 iOS 2024-05-14 This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device …	LOW 2.4	—	iOS	2024-05-14
CVE-2024-27803 LOW 2.4 iOS 2024-05-14 A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to sh…	LOW 2.4	—	iOS	2024-05-14
CVE-2024-23228 LOW 3.3 iOS 2024-04-24 This issue was addressed through improved state management. This issue is fixed in iOS 17.3 and iPadOS 17.3. Locked Notes content may have been unexpectedly un…	LOW 3.3	—	iOS	2024-04-24
CVE-2024-3302 LOW · vendor 2024-04-16 There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the b…	LOW · vendor	—		2024-04-16
CVE-2024-2004 LOW 3.5 macOS 2024-03-27 When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to a…	LOW 3.5	—	macOS	2024-03-27
CVE-2024-2616 LOW 2.7 2024-03-19 To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects F…	LOW 2.7	—		2024-03-19
CVE-2024-2606 LOW 3.7 Mozilla Firefox 2024-03-19 Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Fi…	LOW 3.7	—	Mozilla Firefox	2024-03-19
CVE-2024-26246 LOW 3.9 Microsoft Edge 2024-03-14 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability	LOW 3.9	—	Microsoft Edge	2024-03-14
CVE-2024-23292 LOW 3.3 macOS iOS 2024-03-08 This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access inform…	LOW 3.3	—	macOS iOS	2024-03-08
CVE-2024-23291 LOW 3.3 macOS iOS 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17…	LOW 3.3	—	macOS iOS	2024-03-08
CVE-2024-23289 LOW 3.3 macOS iOS 2024-03-08 A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 1…	LOW 3.3	—	macOS iOS	2024-03-08
CVE-2024-23262 LOW 3.3 iOS 2024-03-08 This issue was addressed with additional entitlement checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, visionOS 1.1. An ap…	LOW 3.3	—	iOS	2024-03-08
CVE-2024-23257 LOW 3.3 macOS iOS 2024-03-08 The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ven…	LOW 3.3	—	macOS iOS	2024-03-08
CVE-2024-23255 LOW 2.4 macOS iOS 2024-03-08 An authentication issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Photos in the Hidden …	LOW 2.4	—	macOS iOS	2024-03-08
CVE-2024-23253 LOW 3.3 macOS 2024-03-08 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to access a user's Photos Library.	LOW 3.3	—	macOS	2024-03-08
CVE-2024-23245 LOW 3.3 macOS 2024-03-08 This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5…	LOW 3.3	—	macOS	2024-03-08
CVE-2024-23242 LOW 3.3 macOS iOS 2024-03-08 A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to…	LOW 3.3	—	macOS iOS	2024-03-08
CVE-2024-23240 LOW 2.4 iOS 2024-03-08 The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4. Shake-to-undo may allow a deleted photo to be re-surfaced withou…	LOW 2.4	—	iOS	2024-03-08
CVE-2024-23238 LOW 3.3 macOS 2024-03-08 An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to edit NVRAM variables.	LOW 3.3	—	macOS	2024-03-08
CVE-2024-23232 LOW 3.3 macOS 2024-03-08 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14.4. An app may be able to capture a user's scree…	LOW 3.3	—	macOS	2024-03-08
CVE-2024-23227 LOW 3.3 macOS 2024-03-08 This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.…	LOW 3.3	—	macOS	2024-03-08
CVE-2024-23256 LOW 3.3 iOS 2024-03-05 A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4. A user's locked tabs may be briefly visible while …	LOW 3.3	—	iOS	2024-03-05
CVE-2024-23243 LOW 3.3 iOS 2024-03-05 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4. An app may be able to read…	LOW 3.3	—	iOS	2024-03-05
CVE-2024-23743 LOW 3.3 2024-01-28 Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must lau…	LOW 3.3	—		2024-01-28
CVE-2024-23217 LOW 3.3 macOS iOS 2024-01-23 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6…	LOW 3.3	—	macOS iOS	2024-01-23
CVE-2024-23211 LOW 3.3 iOS macOS 2024-01-23 A privacy issue was addressed with improved handling of user preferences. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS…	LOW 3.3	—	iOS macOS	2024-01-23
CVE-2024-23210 LOW 3.3 iOS macOS 2024-01-23 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watch…	LOW 3.3	—	iOS macOS	2024-01-23
CVE-2023-43588 LOW 3.5 Zoom 2023-11-15 Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.	LOW 3.5	—	Zoom	2023-11-15
CVE-2023-39206 LOW 3.7 2023-11-14 Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.	LOW 3.7	—		2023-11-14
CVE-2023-38039 LOW · vendor macOS Windows 2023-10-10 Hackerone: CVE-2023-38039 HTTP headers eat all memory	LOW · vendor	—	macOS Windows	2023-10-10
CVE-2022-4923 LOW 3.1 2023-07-29 Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an attacker in a privileged network position to perform a man-in-the-mid…	LOW 3.1	—		2023-07-29
CVE-2023-34414 LOW 3.1 2023-06-19 The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks tha…	LOW 3.1	—		2023-06-19
CVE-2023-28301 LOW 3.7 Microsoft Edge 2023-04-11 Microsoft Edge (Chromium-based) Tampering Vulnerability	LOW 3.7	—	Microsoft Edge	2023-04-11
CVE-2022-36835 LOW 3.3 Samsung Browser 2022-08-05 Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files.	LOW 3.3	—	Samsung Browser	2022-08-05
CVE-2021-37964 LOW 3.3 2021-10-08 Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allowed an attacker with a rogue wireless access point t…	LOW 3.3	—		2021-10-08
CVE-2021-41861 LOW 3.3 Telegram 2021-10-04 The Telegram application 7.5.0 through 7.8.0 for Android does not properly implement image self-destruction, a different vulnerability than CVE-2019-16248. Aft…	LOW 3.3	—	Telegram	2021-10-04
CVE-2021-3655 LOW 3.3 Android 2021-08-05 A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uni…	LOW 3.3	—	Android	2021-08-05
CVE-2021-29948 LOW 2.5 Mozilla Thunderbird 2021-06-24 Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replac…	LOW 2.5	—	Mozilla Thunderbird	2021-06-24
CVE-2020-27895 LOW 3.3 iTunes 2020-12-08 An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTune…	LOW 3.3	—	iTunes	2020-12-08

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM