Vulnerabilities

Tracked app vulnerabilities

10,960 CVEs affect a tracked app or OS (all severities, macOS). 106 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 10,960
Actively exploited: 106
Publication window: 1997-01-01 → 2026-11-11

All CVEs 10,960 CISA KEV 106 Public exploit 150 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

10,960 entries macOS Clear all

CVE	Severity	KEV	Apps	Published
CVE-2025-24204 CRITICAL 9.8 macOS 2025-03-31 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.	CRITICAL 9.8	—	macOS	2025-03-31
CVE-2025-24203 MEDIUM 5.0 iOS macOS 2025-03-31 The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ve…	MEDIUM 5.0	—	iOS macOS	2025-03-31
CVE-2025-24202 MEDIUM 5.5 iOS macOS 2025-03-31 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access s…	MEDIUM 5.5	—	iOS macOS	2025-03-31
CVE-2025-24199 MEDIUM 5.5 macOS 2025-03-31 An uncontrolled format string issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura…	MEDIUM 5.5	—	macOS	2025-03-31
CVE-2025-24198 MEDIUM 6.6 iOS macOS 2025-03-31 This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4,…	MEDIUM 6.6	—	iOS macOS	2025-03-31
CVE-2025-24196 HIGH 8.8 macOS 2025-03-31 A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. An attacker with user privi…	HIGH 8.8	—	macOS	2025-03-31
CVE-2025-24195 CRITICAL 9.8 macOS 2025-03-31 An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user …	CRITICAL 9.8	—	macOS	2025-03-31
CVE-2025-24194 MEDIUM 6.5 iOS macOS 2025-03-31 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. P…	MEDIUM 6.5	—	iOS macOS	2025-03-31
CVE-2025-24192 MEDIUM 6.5 iOS macOS 2025-03-31 A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. V…	MEDIUM 6.5	—	iOS macOS	2025-03-31
CVE-2025-24191 MEDIUM 5.5 macOS 2025-03-31 The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected pa…	MEDIUM 5.5	—	macOS	2025-03-31
CVE-2025-24190 CRITICAL 9.8 iOS macOS 2025-03-31 The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5,…	CRITICAL 9.8	—	iOS macOS	2025-03-31
CVE-2025-24182 MEDIUM 5.5 iOS macOS 2025-03-31 An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visio…	MEDIUM 5.5	—	iOS macOS	2025-03-31
CVE-2025-24181 CRITICAL 9.8 macOS 2025-03-31 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app ma…	CRITICAL 9.8	—	macOS	2025-03-31
CVE-2025-24180 HIGH 8.1 iOS macOS 2025-03-31 The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS…	HIGH 8.1	—	iOS macOS	2025-03-31
CVE-2025-24178 CRITICAL 9.8 iOS macOS 2025-03-31 This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14…	CRITICAL 9.8	—	iOS macOS	2025-03-31
CVE-2025-24173 HIGH 7.8 iOS macOS 2025-03-31 This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 1…	HIGH 7.8	—	iOS macOS	2025-03-31
CVE-2025-24172 CRITICAL 9.8 macOS 2025-03-31 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. "…	CRITICAL 9.8	—	macOS	2025-03-31
CVE-2025-24170 HIGH 7.8 macOS 2025-03-31 A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be ab…	HIGH 7.8	—	macOS	2025-03-31
CVE-2025-24167 CRITICAL 9.8 iOS macOS 2025-03-31 This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. A d…	CRITICAL 9.8	—	iOS macOS	2025-03-31
CVE-2025-24164 MEDIUM 5.5 macOS 2025-03-31 A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to m…	MEDIUM 5.5	—	macOS	2025-03-31
CVE-2025-24157 MEDIUM 5.6 macOS 2025-03-31 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An a…	MEDIUM 5.6	—	macOS	2025-03-31
CVE-2025-24148 MEDIUM 5.5 macOS 2025-03-31 This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A ma…	MEDIUM 5.5	—	macOS	2025-03-31
CVE-2025-24097 MEDIUM 5.0 iOS macOS 2025-03-31 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonom…	MEDIUM 5.0	—	iOS macOS	2025-03-31
CVE-2024-54533 HIGH 7.0 macOS 2025-03-31 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A…	HIGH 7.0	—	macOS	2025-03-31
CVE-2024-40864 LOW 2.7 macOS iOS 2025-03-31 The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ve…	LOW 2.7	—	macOS iOS	2025-03-31
CVE-2025-27113 LOW · vendor iOS macOS 2025-03-31 [Apple libxml2] Parsing a file may lead to an unexpected app termination	LOW · vendor	—	iOS macOS	2025-03-31
CVE-2024-9681 MEDIUM · vendor iOS macOS 2025-03-31 [Apple curl] An input validation issue was addressed	MEDIUM · vendor	—	iOS macOS	2025-03-31
CVE-2024-56171 HIGH · vendor iOS macOS 2025-03-31 [Apple libxml2] Parsing a file may lead to an unexpected app termination	HIGH · vendor	—	iOS macOS	2025-03-31
CVE-2024-48958 HIGH · vendor iOS macOS 2025-03-31 [Apple libarchive] An input validation issue was addressed	HIGH · vendor	—	iOS macOS	2025-03-31
CVE-2025-2783 HIGH 8.3 KEV 2025-03-26 Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandb…	HIGH 8.3	KEV		2025-03-26
CVE-2024-54564 MEDIUM 6.5 iOS macOS 2025-03-21 This issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, visionOS 1.3. A file received f…	MEDIUM 6.5	—	iOS macOS	2025-03-21
CVE-2024-54551 HIGH 7.5 iOS macOS 2025-03-21 The issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3…	HIGH 7.5	—	iOS macOS	2025-03-21
CVE-2024-44305 HIGH 7.8 macOS 2025-03-21 This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.6. An app may be able to gain root privileges.	HIGH 7.8	—	macOS	2025-03-21
CVE-2024-44199 HIGH 7.1 macOS 2025-03-21 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An app may be able to cause unexpected system ter…	HIGH 7.1	—	macOS	2025-03-21
CVE-2025-2476 HIGH 8.8 2025-03-19 Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…	HIGH 8.8	—		2025-03-19
CVE-2025-24185 MEDIUM 5.5 macOS 2025-03-17 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3…	MEDIUM 5.5	—	macOS	2025-03-17
CVE-2024-54565 MEDIUM 6.2 macOS 2025-03-17 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data.	MEDIUM 6.2	—	macOS	2025-03-17
CVE-2024-54559 MEDIUM 5.5 macOS 2025-03-17 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data.	MEDIUM 5.5	—	macOS	2025-03-17
CVE-2024-54525 HIGH 8.8 iOS macOS 2025-03-17 A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS …	HIGH 8.8	—	iOS macOS	2025-03-17
CVE-2024-8176 HIGH 7.5 iOS macOS 2025-03-14 A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML docume…	HIGH 7.5	—	iOS macOS	2025-03-14
CVE-2025-24201 CRITICAL 10.0 KEV iOS macOS 2025-03-11 An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15…	CRITICAL 10.0	KEV	iOS macOS	2025-03-11
CVE-2025-24082 HIGH 7.8 2025-03-11 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	HIGH 7.8	—		2025-03-11
CVE-2025-24081 HIGH 7.8 2025-03-11 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	HIGH 7.8	—		2025-03-11
CVE-2025-24079 HIGH 7.8 2025-03-11 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.	HIGH 7.8	—		2025-03-11
CVE-2025-24078 HIGH 7.0 2025-03-11 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.	HIGH 7.0	—		2025-03-11
CVE-2025-24075 HIGH 7.8 2025-03-11 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	HIGH 7.8	—		2025-03-11
CVE-2025-24855 HIGH · vendor iOS macOS 2025-03-11 numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is…	HIGH · vendor	—	iOS macOS	2025-03-11
CVE-2024-55549 HIGH · vendor iOS macOS 2025-03-11 xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue	HIGH · vendor	—	iOS macOS	2025-03-11
CVE-2025-2137 HIGH 8.8 2025-03-10 Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chr…	HIGH 8.8	—		2025-03-10
CVE-2025-2136 HIGH 8.8 2025-03-10 Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…	HIGH 8.8	—		2025-03-10

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM