Vulnerabilities

Tracked app vulnerabilities

6,377 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 6,377
Actively exploited: 33
Publication window: 2009-07-30 → 2026-11-11

All CVEs 6,377 CISA KEV 33 Public exploit 39 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

6,377 entries Medium Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-40780 MEDIUM 5.5 iOS macOS 2024-07-29 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, …	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-40779 MEDIUM 5.5 iOS macOS 2024-07-29 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, …	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-40777 MEDIUM 5.5 iOS macOS 2024-07-29 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visio…	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-40776 MEDIUM 4.3 iOS macOS 2024-07-29 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.…	MEDIUM 4.3	—	iOS macOS	2024-07-29
CVE-2024-40775 MEDIUM 5.5 macOS 2024-07-29 A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.…	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-27888 MEDIUM 5.5 macOS 2024-07-29 A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sonoma 14.4. An app may be able to mod…	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-27887 MEDIUM 5.5 macOS 2024-07-29 A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-27886 MEDIUM 5.5 macOS 2024-07-29 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app may be able to log ke…	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-27884 MEDIUM 5.5 iOS macOS 2024-07-29 This issue was addressed with a new entitlement. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An …	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-27883 MEDIUM 4.4 macOS 2024-07-29 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app m…	MEDIUM 4.4	—	macOS	2024-07-29
CVE-2024-27882 MEDIUM 4.4 macOS 2024-07-29 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app m…	MEDIUM 4.4	—	macOS	2024-07-29
CVE-2024-27881 MEDIUM 5.3 macOS 2024-07-29 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Vent…	MEDIUM 5.3	—	macOS	2024-07-29
CVE-2024-27878 MEDIUM 6.7 macOS 2024-07-29 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code wit…	MEDIUM 6.7	—	macOS	2024-07-29
CVE-2024-27877 MEDIUM 6.1 macOS 2024-07-29 The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Processing a mali…	MEDIUM 6.1	—	macOS	2024-07-29
CVE-2024-27873 MEDIUM 5.5 iOS macOS 2024-07-29 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS…	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-27872 MEDIUM 5.5 macOS 2024-07-29 This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.6. An app may be able to access protected user data.	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-27871 MEDIUM 5.5 iOS macOS 2024-07-29 A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. An app may be able to access …	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-27863 MEDIUM 5.5 iOS macOS 2024-07-29 An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sono…	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-27853 MEDIUM 4.4 macOS 2024-07-29 This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A maliciously crafted ZIP archive may bypass Gatekeeper checks.	MEDIUM 4.4	—	macOS	2024-07-29
CVE-2024-27823 MEDIUM 5.9 iOS macOS 2024-07-29 A race condition was addressed with improved locking. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, mac…	MEDIUM 5.9	—	iOS macOS	2024-07-29
CVE-2024-27809 MEDIUM 5.5 macOS 2024-07-29 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user…	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-38103 MEDIUM 5.9 Microsoft Edge 2024-07-25 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability	MEDIUM 5.9	—	Microsoft Edge	2024-07-25
CVE-2024-38156 MEDIUM 6.1 Microsoft Edge 2024-07-19 Microsoft Edge (Chromium-based) Spoofing Vulnerability	MEDIUM 6.1	—	Microsoft Edge	2024-07-19
CVE-2024-5500 MEDIUM 6.5 2024-07-16 Inappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a remote attacker to bypass navigation restrictions via a crafted HTML pag…	MEDIUM 6.5	—		2024-07-16
CVE-2024-3175 MEDIUM 6.3 2024-07-16 Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform privilege escalation via a crafted Chro…	MEDIUM 6.3	—		2024-07-16
CVE-2024-2884 MEDIUM 6.5 2024-07-16 Out of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HT…	MEDIUM 6.5	—		2024-07-16
CVE-2023-7013 MEDIUM 4.7 2024-07-16 Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially spoof security UI via a crafted H…	MEDIUM 4.7	—		2024-07-16
CVE-2023-7011 MEDIUM 6.5 2024-07-16 Inappropriate implementation in Picture in Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to spoof the contents of the Omnibox (URL…	MEDIUM 6.5	—		2024-07-16
CVE-2020-36765 MEDIUM 6.5 2024-07-16 Insufficient policy enforcement in Navigation in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML pag…	MEDIUM 6.5	—		2024-07-16
CVE-2024-6777 MEDIUM 6.5 2024-07-16 Use after free in Navigation in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to potentially …	MEDIUM 6.5	—		2024-07-16
CVE-2024-38020 MEDIUM 6.5 2024-07-09 Microsoft Outlook Spoofing Vulnerability	MEDIUM 6.5	—		2024-07-09
CVE-2024-6614 MEDIUM · vendor 2024-07-09 The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 …	MEDIUM · vendor	—		2024-07-09
CVE-2024-6613 MEDIUM · vendor 2024-07-09 The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 …	MEDIUM · vendor	—		2024-07-09
CVE-2024-6612 MEDIUM · vendor 2024-07-09 CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CS…	MEDIUM · vendor	—		2024-07-09
CVE-2024-6610 MEDIUM · vendor 2024-07-09 Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen m…	MEDIUM · vendor	—		2024-07-09
CVE-2024-6608 MEDIUM · vendor 2024-07-09 It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulner…	MEDIUM · vendor	—		2024-07-09
CVE-2024-6603 MEDIUM · vendor 2024-07-09 In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerabilit…	MEDIUM · vendor	—		2024-07-09
CVE-2024-6601 MEDIUM · vendor 2024-07-09 A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < 128, Firefox ESR < …	MEDIUM · vendor	—		2024-07-09
CVE-2024-6600 MEDIUM 6.3 2024-07-09 Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private s…	MEDIUM 6.3	—		2024-07-09
CVE-2024-39684 MEDIUM · vendor Windows 2024-07-09 Github: CVE-2024-39684 TenCent RapidJSON Elevation of Privilege Vulnerability	MEDIUM · vendor	—	Windows	2024-07-09
CVE-2024-38517 MEDIUM · vendor Windows 2024-07-09 Github: CVE-2024-38517 TenCent RapidJSON Elevation of Privilege Vulnerability	MEDIUM · vendor	—	Windows	2024-07-09
CVE-2024-39891 MEDIUM 5.3 KEV Twilio Authy Authenticator 2024-07-02 In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-numb…	MEDIUM 5.3	KEV	Twilio Authy Authenticator	2024-07-02
CVE-2024-38093 MEDIUM 4.3 Microsoft Edge 2024-06-20 Microsoft Edge (Chromium-based) Spoofing Vulnerability	MEDIUM 4.3	—	Microsoft Edge	2024-06-20
CVE-2024-38082 MEDIUM 4.7 Microsoft Edge 2024-06-20 Microsoft Edge (Chromium-based) Spoofing Vulnerability	MEDIUM 4.7	—	Microsoft Edge	2024-06-20
CVE-2024-30057 MEDIUM 5.4 Microsoft Edge 2024-06-13 Microsoft Edge for iOS Spoofing Vulnerability	MEDIUM 5.4	—	Microsoft Edge	2024-06-13
CVE-2024-34130 MEDIUM 5.5 Adobe Acrobat 2024-06-13 Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature …	MEDIUM 5.5	—	Adobe Acrobat	2024-06-13
CVE-2024-5843 MEDIUM 6.5 2024-06-11 Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chr…	MEDIUM 6.5	—		2024-06-11
CVE-2024-5840 MEDIUM 6.5 2024-06-11 Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromi…	MEDIUM 6.5	—		2024-06-11
CVE-2024-5839 MEDIUM 6.5 2024-06-11 Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a…	MEDIUM 6.5	—		2024-06-11
CVE-2024-30096 MEDIUM 5.5 Windows 2024-06-11 Windows Cryptographic Services Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2024-06-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM