Vulnerabilities

Tracked app vulnerabilities

6,377 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 6,377
Actively exploited: 33
Publication window: 2009-07-30 → 2026-11-11

All CVEs 6,377 CISA KEV 33 Public exploit 39 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

6,377 entries Medium Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-30076 MEDIUM 6.8 Windows 2024-06-11 Windows Container Manager Service Elevation of Privilege Vulnerability	MEDIUM 6.8	—	Windows	2024-06-11
CVE-2024-30069 MEDIUM 4.7 Windows 2024-06-11 Windows Remote Access Connection Manager Information Disclosure Vulnerability	MEDIUM 4.7	—	Windows	2024-06-11
CVE-2024-30067 MEDIUM 5.5 Windows 2024-06-11 Winlogon Elevation of Privilege Vulnerability	MEDIUM 5.5	—	Windows	2024-06-11
CVE-2024-30066 MEDIUM 5.5 Windows 2024-06-11 Winlogon Elevation of Privilege Vulnerability	MEDIUM 5.5	—	Windows	2024-06-11
CVE-2024-30065 MEDIUM 5.5 Windows 2024-06-11 Windows Themes Denial of Service Vulnerability	MEDIUM 5.5	—	Windows	2024-06-11
CVE-2024-30063 MEDIUM 6.7 Windows 2024-06-11 Windows Distributed File System (DFS) Remote Code Execution Vulnerability	MEDIUM 6.7	—	Windows	2024-06-11
CVE-2024-5693 MEDIUM 6.1 2024-06-11 Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. T…	MEDIUM 6.1	—		2024-06-11
CVE-2024-5692 MEDIUM 6.5 2024-06-11 On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.ur…	MEDIUM 6.5	—		2024-06-11
CVE-2024-5691 MEDIUM 4.7 2024-06-11 By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions…	MEDIUM 4.7	—		2024-06-11
CVE-2024-5690 MEDIUM · vendor 2024-06-11 By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulner…	MEDIUM · vendor	—		2024-06-11
CVE-2024-27885 MEDIUM 6.3 macOS 2024-06-10 This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app ma…	MEDIUM 6.3	—	macOS	2024-06-10
CVE-2024-27850 MEDIUM 6.5 iOS macOS 2024-06-10 This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, v…	MEDIUM 6.5	—	iOS macOS	2024-06-10
CVE-2024-27844 MEDIUM 5.5 Safari macOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in Safari 17.5, macOS Sonoma 14.5, visionOS 1.2. A website's permission dialog may persist af…	MEDIUM 5.5	—	Safari macOS	2024-06-10
CVE-2024-27840 MEDIUM 6.3 iOS macOS 2024-06-10 The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, ma…	MEDIUM 6.3	—	iOS macOS	2024-06-10
CVE-2024-27838 MEDIUM 6.5 iOS macOS 2024-06-10 The issue was addressed by adding additional logic. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14…	MEDIUM 6.5	—	iOS macOS	2024-06-10
CVE-2024-27830 MEDIUM 6.5 iOS macOS 2024-06-10 This issue was addressed through improved state management. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionO…	MEDIUM 6.5	—	iOS macOS	2024-06-10
CVE-2024-27807 MEDIUM 4.3 iOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5. An app may be able to circumvent A…	MEDIUM 4.3	—	iOS	2024-06-10
CVE-2024-27806 MEDIUM 5.5 iOS macOS 2024-06-10 This issue was addressed with improved environment sanitization. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey …	MEDIUM 5.5	—	iOS macOS	2024-06-10
CVE-2024-27805 MEDIUM 5.5 iOS macOS 2024-06-10 An issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS …	MEDIUM 5.5	—	iOS macOS	2024-06-10
CVE-2024-27800 MEDIUM 6.5 iOS macOS 2024-06-10 This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5,…	MEDIUM 6.5	—	iOS macOS	2024-06-10
CVE-2024-23282 MEDIUM 5.5 iOS macOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A…	MEDIUM 5.5	—	iOS macOS	2024-06-10
CVE-2024-23251 MEDIUM 4.6 iOS macOS 2024-06-10 An authentication issue was addressed with improved state management. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sono…	MEDIUM 4.6	—	iOS macOS	2024-06-10
CVE-2024-27792 MEDIUM 5.5 macOS 2024-06-10 This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive…	MEDIUM 5.5	—	macOS	2024-06-10
CVE-2023-40389 MEDIUM 5.5 macOS 2024-06-10 The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be a…	MEDIUM 5.5	—	macOS	2024-06-10
CVE-2024-4950 MEDIUM 6.5 2024-05-15 Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specific UI gestu…	MEDIUM 6.5	—		2024-05-15
CVE-2024-4949 MEDIUM 6.5 2024-05-15 Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…	MEDIUM 6.5	—		2024-05-15
CVE-2024-4948 MEDIUM 6.5 2024-05-15 Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…	MEDIUM 6.5	—		2024-05-15
CVE-2024-4772 MEDIUM 5.9 Mozilla Firefox 2024-05-14 An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126.	MEDIUM 5.9	—	Mozilla Firefox	2024-05-14
CVE-2024-4769 MEDIUM 5.9 2024-05-14 When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses…	MEDIUM 5.9	—		2024-05-14
CVE-2024-4768 MEDIUM 6.1 2024-05-14 A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Fi…	MEDIUM 6.1	—		2024-05-14
CVE-2024-4767 MEDIUM 4.3 2024-05-14 If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disa…	MEDIUM 4.3	—		2024-05-14
CVE-2024-27852 MEDIUM 6.5 iOS 2024-05-14 A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously…	MEDIUM 6.5	—	iOS	2024-05-14
CVE-2024-27847 MEDIUM 5.5 iOS macOS 2024-05-14 This issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sono…	MEDIUM 5.5	—	iOS macOS	2024-05-14
CVE-2024-27841 MEDIUM 5.5 iOS macOS 2024-05-14 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to disclose kerne…	MEDIUM 5.5	—	iOS macOS	2024-05-14
CVE-2024-27834 MEDIUM 5.5 KEV iOS macOS 2024-05-14 The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tv…	MEDIUM 5.5	KEV	iOS macOS	2024-05-14
CVE-2024-27827 MEDIUM 5.5 macOS 2024-05-14 This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to read arbitrar…	MEDIUM 5.5	—	macOS	2024-05-14
CVE-2024-27821 MEDIUM 4.7 iOS macOS 2024-05-14 A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A shortcut may …	MEDIUM 4.7	—	iOS macOS	2024-05-14
CVE-2024-27816 MEDIUM 5.5 iOS macOS 2024-05-14 A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker may …	MEDIUM 5.5	—	iOS macOS	2024-05-14
CVE-2024-27810 MEDIUM 5.5 iOS macOS 2024-05-14 A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS …	MEDIUM 5.5	—	iOS macOS	2024-05-14
CVE-2024-27804 MEDIUM 5.5 iOS macOS 2024-05-14 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.3, watchOS 10.…	MEDIUM 5.5	—	iOS macOS	2024-05-14
CVE-2024-27789 MEDIUM 5.5 iOS macOS 2024-05-14 A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura …	MEDIUM 5.5	—	iOS macOS	2024-05-14
CVE-2024-23236 MEDIUM 5.5 macOS 2024-05-14 A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to read arbitrary files.	MEDIUM 5.5	—	macOS	2024-05-14
CVE-2024-23229 MEDIUM 5.5 macOS 2024-05-14 This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.…	MEDIUM 5.5	—	macOS	2024-05-14
CVE-2024-30050 MEDIUM · vendor Windows 2024-05-14 Windows Mark of the Web Security Feature Bypass Vulnerability	MEDIUM · vendor	—	Windows	2024-05-14
CVE-2024-4559 MEDIUM 6.5 2024-05-07 Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	MEDIUM 6.5	—		2024-05-07
CVE-2024-4060 MEDIUM 6.5 2024-05-01 Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…	MEDIUM 6.5	—		2024-05-01
CVE-2024-4059 MEDIUM 6.5 2024-05-01 Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. (Chromium secur…	MEDIUM 6.5	—		2024-05-01
CVE-2024-23271 MEDIUM 6.5 iOS macOS 2024-04-24 A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A m…	MEDIUM 6.5	—	iOS macOS	2024-04-24
CVE-2024-3914 MEDIUM 6.5 2024-04-17 Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…	MEDIUM 6.5	—		2024-04-17
CVE-2024-3847 MEDIUM 6.1 2024-04-17 Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML…	MEDIUM 6.1	—		2024-04-17

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM