Vulnerabilities

Tracked app vulnerabilities

6,377 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 6,377
Actively exploited: 33
Publication window: 2009-07-30 → 2026-11-11

All CVEs 6,377 CISA KEV 33 Public exploit 39 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

6,377 entries Medium Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-23264 MEDIUM 5.5 macOS iOS 2024-03-08 A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Montere…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23263 MEDIUM 6.5 macOS iOS 2024-03-08 A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma …	MEDIUM 6.5	—	macOS iOS	2024-03-08
CVE-2024-23260 MEDIUM 5.5 macOS 2024-03-08 This issue was addressed by removing additional entitlements. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.	MEDIUM 5.5	—	macOS	2024-03-08
CVE-2024-23259 MEDIUM 6.5 macOS iOS 2024-03-08 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Processing web …	MEDIUM 6.5	—	macOS iOS	2024-03-08
CVE-2024-23254 MEDIUM 6.5 macOS iOS 2024-03-08 The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, wa…	MEDIUM 6.5	—	macOS iOS	2024-03-08
CVE-2024-23250 MEDIUM 5.5 macOS iOS 2024-03-08 An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23241 MEDIUM 5.5 macOS iOS 2024-03-08 This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4. An app may be able t…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23239 MEDIUM 4.7 macOS iOS 2024-03-08 A race condition was addressed with improved state handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An ap…	MEDIUM 4.7	—	macOS iOS	2024-03-08
CVE-2024-23235 MEDIUM 4.7 macOS iOS 2024-03-08 A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tv…	MEDIUM 4.7	—	macOS iOS	2024-03-08
CVE-2024-23234 MEDIUM 6.7 macOS 2024-03-08 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.…	MEDIUM 6.7	—	macOS	2024-03-08
CVE-2024-23231 MEDIUM 5.5 macOS iOS 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23230 MEDIUM 5.5 macOS 2024-03-08 This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able…	MEDIUM 5.5	—	macOS	2024-03-08
CVE-2024-23220 MEDIUM 5.5 iOS 2024-03-08 The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to fingerprint the …	MEDIUM 5.5	—	iOS	2024-03-08
CVE-2024-23205 MEDIUM 5.5 macOS iOS 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app …	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23201 MEDIUM 5.5 macOS iOS 2024-03-08 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macO…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2023-28826 MEDIUM 5.5 macOS iOS 2024-03-08 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS So…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-26167 MEDIUM 4.3 Microsoft Edge 2024-03-07 Microsoft Edge for Android Spoofing Vulnerability	MEDIUM 4.3	—	Microsoft Edge	2024-03-07
CVE-2024-26188 MEDIUM 4.3 Microsoft Edge 2024-02-23 Microsoft Edge (Chromium-based) Spoofing Vulnerability	MEDIUM 4.3	—	Microsoft Edge	2024-02-23
CVE-2023-42853 MEDIUM 5.5 macOS 2024-02-21 A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to …	MEDIUM 5.5	—	macOS	2024-02-21
CVE-2024-1676 MEDIUM 5.4 2024-02-21 Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chr…	MEDIUM 5.4	—		2024-02-21
CVE-2024-1672 MEDIUM 5.4 2024-02-21 Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via…	MEDIUM 5.4	—		2024-02-21
CVE-2024-1671 MEDIUM 6.5 2024-02-21 Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafte…	MEDIUM 6.5	—		2024-02-21
CVE-2024-1556 MEDIUM 6.5 Mozilla Firefox 2024-02-20 The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue onl…	MEDIUM 6.5	—	Mozilla Firefox	2024-02-20
CVE-2024-1551 MEDIUM · vendor 2024-02-20 Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well …	MEDIUM · vendor	—		2024-02-20
CVE-2024-1550 MEDIUM · vendor 2024-02-20 A malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user's mouse to be re-positioned unexpectedl…	MEDIUM · vendor	—		2024-02-20
CVE-2024-1549 MEDIUM 6.1 2024-02-20 If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in user confusion and un…	MEDIUM 6.1	—		2024-02-20
CVE-2024-1548 MEDIUM · vendor 2024-02-20 A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing…	MEDIUM · vendor	—		2024-02-20
CVE-2024-1547 MEDIUM 6.5 2024-02-20 Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website (with the victim website's URL sh…	MEDIUM 6.5	—		2024-02-20
CVE-2024-24699 MEDIUM 6.5 2024-02-14 Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.	MEDIUM 6.5	—		2024-02-14
CVE-2024-24698 MEDIUM 4.9 2024-02-14 Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.	MEDIUM 4.9	—		2024-02-14
CVE-2024-24690 MEDIUM 5.4 2024-02-14 Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.	MEDIUM 5.4	—		2024-02-14
CVE-2024-21377 MEDIUM 5.5 Windows 2024-02-13 Windows DNS Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2024-02-13
CVE-2024-21362 MEDIUM 5.5 Windows 2024-02-13 Windows Kernel Security Feature Bypass Vulnerability	MEDIUM 5.5	—	Windows	2024-02-13
CVE-2024-21356 MEDIUM 6.5 Windows 2024-02-13 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability	MEDIUM 6.5	—	Windows	2024-02-13
CVE-2024-21344 MEDIUM 5.9 Windows 2024-02-13 Windows Network Address Translation (NAT) Denial of Service Vulnerability	MEDIUM 5.9	—	Windows	2024-02-13
CVE-2024-21343 MEDIUM 5.9 Windows 2024-02-13 Windows Network Address Translation (NAT) Denial of Service Vulnerability	MEDIUM 5.9	—	Windows	2024-02-13
CVE-2024-21341 MEDIUM 6.8 Windows 2024-02-13 Windows Kernel Remote Code Execution Vulnerability	MEDIUM 6.8	—	Windows	2024-02-13
CVE-2024-21340 MEDIUM 4.6 Windows 2024-02-13 Windows Kernel Information Disclosure Vulnerability	MEDIUM 4.6	—	Windows	2024-02-13
CVE-2024-21339 MEDIUM 6.4 Windows 2024-02-13 Windows USB Generic Parent Driver Remote Code Execution Vulnerability	MEDIUM 6.4	—	Windows	2024-02-13
CVE-2024-21304 MEDIUM 4.1 Windows 2024-02-13 Trusted Compute Base Elevation of Privilege Vulnerability	MEDIUM 4.1	—	Windows	2024-02-13
CVE-2024-20684 MEDIUM 6.5 Windows 2024-02-13 Windows Hyper-V Denial of Service Vulnerability	MEDIUM 6.5	—	Windows	2024-02-13
CVE-2024-0814 MEDIUM 6.5 2024-01-24 Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (…	MEDIUM 6.5	—		2024-01-24
CVE-2024-0811 MEDIUM 4.3 2024-01-24 Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extensio…	MEDIUM 4.3	—		2024-01-24
CVE-2024-0810 MEDIUM 4.3 2024-01-24 Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension t…	MEDIUM 4.3	—		2024-01-24
CVE-2024-0809 MEDIUM 4.3 2024-01-24 Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML p…	MEDIUM 4.3	—		2024-01-24
CVE-2024-0805 MEDIUM 4.3 2024-01-24 Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain nam…	MEDIUM 4.3	—		2024-01-24
CVE-2024-0753 MEDIUM · vendor 2024-01-23 In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunder…	MEDIUM · vendor	—		2024-01-23
CVE-2024-0749 MEDIUM 4.3 2024-01-23 A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar. This vulnerability affects Firef…	MEDIUM 4.3	—		2024-01-23
CVE-2024-0747 MEDIUM 6.5 2024-01-23 When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy…	MEDIUM 6.5	—		2024-01-23
CVE-2024-0746 MEDIUM · vendor 2024-01-23 A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunde…	MEDIUM · vendor	—		2024-01-23

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM