Vulnerabilities

Tracked app vulnerabilities

7,995 CVEs affect a tracked app or OS (all severities, macOS). 103 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 7,995
Actively exploited: 103
Publication window: 2004-07-27 → 2026-09-29

All CVEs 7,995 CISA KEV 103 Public exploit 52 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

7,995 entries macOS Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2026-20629 MEDIUM 5.5 macOS 2026-02-11 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be able to access user-sensitive d…	MEDIUM 5.5	—	macOS	2026-02-11
CVE-2026-20628 HIGH 7.1 iOS macOS 2026-02-11 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15…	HIGH 7.1	—	iOS macOS	2026-02-11
CVE-2026-20627 MEDIUM 5.5 macOS iOS 2026-02-11 An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, …	MEDIUM 5.5	—	macOS iOS	2026-02-11
CVE-2026-20626 HIGH 7.8 macOS iOS 2026-02-11 This issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Tahoe 26.3, visionOS 26.3. A malici…	HIGH 7.8	—	macOS iOS	2026-02-11
CVE-2026-20625 MEDIUM 5.5 macOS 2026-02-11 A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.…	MEDIUM 5.5	—	macOS	2026-02-11
CVE-2026-20624 MEDIUM 5.5 macOS 2026-02-11 An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be ab…	MEDIUM 5.5	—	macOS	2026-02-11
CVE-2026-20623 MEDIUM 5.5 macOS 2026-02-11 A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An app may be able to access …	MEDIUM 5.5	—	macOS	2026-02-11
CVE-2026-20621 MEDIUM 5.5 iOS macOS 2026-02-11 The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, mac…	MEDIUM 5.5	—	iOS macOS	2026-02-11
CVE-2026-20620 HIGH 7.7 macOS 2026-02-11 An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. A…	HIGH 7.7	—	macOS	2026-02-11
CVE-2026-20619 MEDIUM 5.5 macOS 2026-02-11 A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3. An app may be able to access sensiti…	MEDIUM 5.5	—	macOS	2026-02-11
CVE-2026-20618 MEDIUM 5.5 macOS 2026-02-11 An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Tahoe 26.3. An app may be able to access user-sensitive data.	MEDIUM 5.5	—	macOS	2026-02-11
CVE-2026-20617 HIGH 7.0 macOS iOS 2026-02-11 A race condition was addressed with improved state handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS …	HIGH 7.0	—	macOS iOS	2026-02-11
CVE-2026-20616 HIGH 8.8 iOS macOS 2026-02-11 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sonoma 14.8.4, macOS Tahoe…	HIGH 8.8	—	iOS macOS	2026-02-11
CVE-2026-20615 HIGH 7.8 macOS iOS 2026-02-11 A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS…	HIGH 7.8	—	macOS iOS	2026-02-11
CVE-2026-20614 HIGH 7.8 macOS 2026-02-11 A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be…	HIGH 7.8	—	macOS	2026-02-11
CVE-2026-20612 MEDIUM 5.5 macOS 2026-02-11 A privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be able to a…	MEDIUM 5.5	—	macOS	2026-02-11
CVE-2026-20611 HIGH 7.8 iOS macOS 2026-02-11 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS…	HIGH 7.8	—	iOS macOS	2026-02-11
CVE-2026-20610 HIGH 7.8 macOS 2026-02-11 This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.3. An app may be able to gain root privileges.	HIGH 7.8	—	macOS	2026-02-11
CVE-2026-20609 MEDIUM 4.4 iOS macOS 2026-02-11 The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, mac…	MEDIUM 4.4	—	iOS macOS	2026-02-11
CVE-2026-20608 MEDIUM 5.5 iOS macOS 2026-02-11 This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS T…	MEDIUM 5.5	—	iOS macOS	2026-02-11
CVE-2026-20606 HIGH 7.1 iOS macOS 2026-02-11 This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, …	HIGH 7.1	—	iOS macOS	2026-02-11
CVE-2026-20605 MEDIUM 4.6 iOS macOS 2026-02-11 The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Ta…	MEDIUM 4.6	—	iOS macOS	2026-02-11
CVE-2026-20603 MEDIUM 4.4 macOS 2026-02-11 This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Tahoe 26.3. An app with root privileges may be able to …	MEDIUM 4.4	—	macOS	2026-02-11
CVE-2026-20602 MEDIUM 5.5 macOS 2026-02-11 The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may be abl…	MEDIUM 5.5	—	macOS	2026-02-11
CVE-2026-20601 LOW 3.3 macOS 2026-02-11 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to monitor keystrokes without user …	LOW 3.3	—	macOS	2026-02-11
CVE-2025-46310 MEDIUM 6.0 macOS 2026-02-11 This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26. An attacker with …	MEDIUM 6.0	—	macOS	2026-02-11
CVE-2025-46305 MEDIUM 5.7 iOS macOS 2026-02-11 The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS…	MEDIUM 5.7	—	iOS macOS	2026-02-11
CVE-2025-46304 MEDIUM 5.7 iOS macOS 2026-02-11 The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS…	MEDIUM 5.7	—	iOS macOS	2026-02-11
CVE-2025-46303 MEDIUM 5.7 iOS macOS 2026-02-11 The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS…	MEDIUM 5.7	—	iOS macOS	2026-02-11
CVE-2025-46302 MEDIUM 5.7 iOS macOS 2026-02-11 The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS…	MEDIUM 5.7	—	iOS macOS	2026-02-11
CVE-2025-46301 MEDIUM 5.7 iOS macOS 2026-02-11 The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS…	MEDIUM 5.7	—	iOS macOS	2026-02-11
CVE-2025-46300 MEDIUM 5.7 iOS macOS 2026-02-11 The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS…	MEDIUM 5.7	—	iOS macOS	2026-02-11
CVE-2025-46290 HIGH 7.5 macOS iOS 2026-02-11 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS So…	HIGH 7.5	—	macOS iOS	2026-02-11
CVE-2025-43417 MEDIUM 5.5 macOS 2026-02-11 A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able…	MEDIUM 5.5	—	macOS	2026-02-11
CVE-2025-43403 MEDIUM 5.5 macOS 2026-02-11 An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26. An app m…	MEDIUM 5.5	—	macOS	2026-02-11
CVE-2026-2323 MEDIUM 4.3 2026-02-11 Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Ch…	MEDIUM 4.3	—		2026-02-11
CVE-2026-2322 MEDIUM 5.4 2026-02-11 Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gest…	MEDIUM 5.4	—		2026-02-11
CVE-2026-2321 HIGH 8.8 2026-02-11 Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially…	HIGH 8.8	—		2026-02-11
CVE-2026-2320 MEDIUM 6.5 2026-02-11 Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gest…	MEDIUM 6.5	—		2026-02-11
CVE-2026-2319 HIGH 7.5 2026-02-11 Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures and install a malicio…	HIGH 7.5	—		2026-02-11
CVE-2026-2318 MEDIUM 6.5 2026-02-11 Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific U…	MEDIUM 6.5	—		2026-02-11
CVE-2026-2317 MEDIUM 6.5 2026-02-11 Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. …	MEDIUM 6.5	—		2026-02-11
CVE-2026-2316 MEDIUM 6.5 2026-02-11 Insufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Ch…	MEDIUM 6.5	—		2026-02-11
CVE-2026-2315 HIGH 8.8 2026-02-11 Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially perform out of bounds memory access via…	HIGH 8.8	—		2026-02-11
CVE-2026-2314 HIGH 8.8 2026-02-11 Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…	HIGH 8.8	—		2026-02-11
CVE-2026-2313 HIGH 8.8 2026-02-11 Use after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…	HIGH 8.8	—		2026-02-11
CVE-2026-1837 HIGH 7.5 iOS macOS 2026-02-11 A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized un…	HIGH 7.5	—	iOS macOS	2026-02-11
CVE-2025-59375 MEDIUM · vendor iOS macOS 2026-02-11 [Apple libexpat] Processing a maliciously crafted file may lead to a denial-of-service	MEDIUM · vendor	—	iOS macOS	2026-02-11
CVE-2026-21511 HIGH 7.5 2026-02-10 Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.	HIGH 7.5	—		2026-02-10
CVE-2026-21261 MEDIUM 5.5 2026-02-10 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.	MEDIUM 5.5	—		2026-02-10

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM