Vulnerabilities
Tracked app vulnerabilities
8,012 CVEs affect a tracked app or OS (all severities, macOS). 103 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 8,012
- Actively exploited
- 103
- Publication window
- 2004-07-27 → 2026-09-29
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-12381
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2023-47100
CRITICAL · vendor
[Apple Perl] Multiple issues in Perl |
|
CVE-2024-2398
HIGH · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2024-2004
LOW · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2023-6277
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2022-48554
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2024-12053
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chro… |
|
CVE-2024-9369
CRITICAL 9.6
Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an o… |
|
CVE-2024-7025
HIGH 8.8
Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
|
CVE-2024-44309
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPad… |
|
CVE-2024-44308
The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 1… |
|
CVE-2024-44307
HIGH 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code wit… |
|
CVE-2024-44306
HIGH 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code wit… |
|
CVE-2024-11395
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2024-11117
MEDIUM 4.3
Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass filesystem restrictions via a crafted HT… |
|
CVE-2024-11116
MEDIUM 4.3
Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures … |
|
CVE-2024-11115
HIGH 8.8
Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a se… |
|
CVE-2024-11114
HIGH 8.3
Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to … |
|
CVE-2024-11113
HIGH 8.8
Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially explo… |
|
CVE-2024-11112
HIGH 8.8
Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2024-11111
MEDIUM 4.3
Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestur… |
|
CVE-2024-11110
MEDIUM 6.5
Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Exte… |
|
CVE-2024-49033
HIGH 7.5
Microsoft Word Security Feature Bypass Vulnerability |
|
CVE-2024-49030
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49029
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49028
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49027
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49026
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-24795
MEDIUM · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2024-2379
MEDIUM · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2023-48795
MEDIUM · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2023-38709
HIGH · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2024-10827
HIGH 8.8
Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2024-10826
HIGH 8.8
Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a… |
|
CVE-2024-44234
The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS S… |
|
CVE-2024-44233
The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS S… |
|
CVE-2024-44232
The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS S… |
|
CVE-2024-10488
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
|
CVE-2024-10487
HIGH 8.8
Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (… |
|
CVE-2024-44295
MEDIUM 5.5
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may b… |
|
CVE-2024-44283
MEDIUM 5.5
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. Parsin… |
|
CVE-2024-44260
MEDIUM 4.4
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious app… |
|
CVE-2024-44257
MEDIUM 5.5
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1… |
|
CVE-2024-44256
HIGH 8.6
The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be a… |
|
CVE-2024-44240
The issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 1… |
|
CVE-2024-44237
MEDIUM 5.5
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1… |
|
CVE-2024-44216
MEDIUM 5.5
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An ap… |
|
CVE-2024-44145
This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to … |
|
CVE-2024-44302
The issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 1… |
|
CVE-2024-44301
MEDIUM 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A malicious application may… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.