Vulnerabilities

Tracked app vulnerabilities

28,051 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,051
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-20

All CVEs 28,051 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,051 entries

CVE	Severity	KEV	Apps	Published
CVE-2025-50159 HIGH · vendor Windows 2025-08-12 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-50158 HIGH · vendor Windows 2025-08-12 Windows NTFS Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-50157 HIGH · vendor Windows 2025-08-12 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-50156 HIGH · vendor Windows 2025-08-12 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-50155 HIGH · vendor Windows 2025-08-12 Windows Push Notifications Apps Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-50154 HIGH · vendor Windows 2025-08-12 Microsoft Windows File Explorer Spoofing Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-50153 HIGH · vendor Windows 2025-08-12 Desktop Window Manager Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-49762 HIGH · vendor Windows 2025-08-12 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-49761 HIGH · vendor Windows 2025-08-12 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-49757 HIGH · vendor Windows 2025-08-12 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-49751 HIGH · vendor Windows 2025-08-12 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-49743 HIGH · vendor Windows 2025-08-12 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2025-08-12
CVE-2025-48807 CRITICAL · vendor Windows 2025-08-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2025-08-12
CVE-2025-55188 LOW 3.6 7-Zip 2025-08-08 7-Zip before 25.01 does not always properly handle symbolic links during extraction.	LOW 3.6	—	7-Zip	2025-08-08
CVE-2025-8088 HIGH 8.8 KEV WinRAR 2025-08-08 A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This…	HIGH 8.8	KEV	WinRAR	2025-08-08
CVE-2025-8583 MEDIUM 4.3 2025-08-07 Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (…	MEDIUM 4.3	—		2025-08-07
CVE-2025-8582 MEDIUM 4.3 2025-08-07 Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox (URL …	MEDIUM 4.3	—		2025-08-07
CVE-2025-8581 MEDIUM 4.3 2025-08-07 Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gest…	MEDIUM 4.3	—		2025-08-07
CVE-2025-8580 MEDIUM 4.3 2025-08-07 Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (…	MEDIUM 4.3	—		2025-08-07
CVE-2025-8579 MEDIUM 4.3 2025-08-07 Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific…	MEDIUM 4.3	—		2025-08-07
CVE-2025-8578 HIGH 8.8 2025-08-07 Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…	HIGH 8.8	—		2025-08-07
CVE-2025-8577 MEDIUM 4.3 2025-08-07 Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific…	MEDIUM 4.3	—		2025-08-07
CVE-2025-8576 HIGH 8.8 2025-08-07 Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte…	HIGH 8.8	—		2025-08-07
CVE-2025-48530 CRITICAL · vendor Android 2025-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2025-08-01
CVE-2025-27038 HIGH · vendor KEV Android 2025-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	KEV	Android	2025-08-01
CVE-2025-22441 HIGH · vendor Android 2025-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-08-01
CVE-2025-21479 CRITICAL · vendor KEV Android 2025-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	KEV	Android	2025-08-01
CVE-2025-0932 HIGH · vendor Android 2025-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-08-01
CVE-2025-8292 HIGH 8.8 2025-07-30 Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…	HIGH 8.8	—		2025-07-30
CVE-2025-43277 HIGH 7.8 macOS iOS 2025-07-30 The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.8, tvOS 18.6, visio…	HIGH 7.8	—	macOS iOS	2025-07-30
CVE-2025-43276 MEDIUM 5.3 macOS 2025-07-30 A logic error was addressed with improved error handling. This issue is fixed in macOS Sequoia 15.6. iCloud Private Relay may not activate when more than one u…	MEDIUM 5.3	—	macOS	2025-07-30
CVE-2025-43275 CRITICAL 9.8 macOS 2025-07-30 A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be …	CRITICAL 9.8	—	macOS	2025-07-30
CVE-2025-43274 MEDIUM 4.4 macOS 2025-07-30 A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to circumvent sandbox…	MEDIUM 4.4	—	macOS	2025-07-30
CVE-2025-43273 CRITICAL 9.1 macOS 2025-07-30 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.8. A sandboxed process may b…	CRITICAL 9.1	—	macOS	2025-07-30
CVE-2025-43270 HIGH 8.8 macOS 2025-07-30 An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An ap…	HIGH 8.8	—	macOS	2025-07-30
CVE-2025-43267 MEDIUM 5.5 macOS 2025-07-30 An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. An app may be able to access sensitive user data.	MEDIUM 5.5	—	macOS	2025-07-30
CVE-2025-43266 MEDIUM 5.1 macOS 2025-07-30 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app ma…	MEDIUM 5.1	—	macOS	2025-07-30
CVE-2025-43265 MEDIUM 4.0 iOS macOS 2025-07-30 An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6…	MEDIUM 4.0	—	iOS macOS	2025-07-30
CVE-2025-43261 CRITICAL 9.8 macOS 2025-07-30 A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to b…	CRITICAL 9.8	—	macOS	2025-07-30
CVE-2025-43260 MEDIUM 5.1 macOS 2025-07-30 This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to hijack entitlemen…	MEDIUM 5.1	—	macOS	2025-07-30
CVE-2025-43259 MEDIUM 4.6 macOS 2025-07-30 This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7…	MEDIUM 4.6	—	macOS	2025-07-30
CVE-2025-43256 HIGH 7.8 macOS 2025-07-30 This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to gain root pri…	HIGH 7.8	—	macOS	2025-07-30
CVE-2025-43254 HIGH 7.1 macOS 2025-07-30 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. Proce…	HIGH 7.1	—	macOS	2025-07-30
CVE-2025-43253 CRITICAL 9.8 macOS 2025-07-30 This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to launch …	CRITICAL 9.8	—	macOS	2025-07-30
CVE-2025-43252 MEDIUM 6.5 macOS 2025-07-30 This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.6. A website may be able to access sensitive …	MEDIUM 6.5	—	macOS	2025-07-30
CVE-2025-43251 MEDIUM 5.5 macOS 2025-07-30 An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.6. A local attacker may gain access to Keychain it…	MEDIUM 5.5	—	macOS	2025-07-30
CVE-2025-43250 MEDIUM 4.0 macOS 2025-07-30 A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may …	MEDIUM 4.0	—	macOS	2025-07-30
CVE-2025-43249 HIGH 7.8 macOS 2025-07-30 A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to g…	HIGH 7.8	—	macOS	2025-07-30
CVE-2025-43248 HIGH 7.8 macOS 2025-07-30 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to gain roo…	HIGH 7.8	—	macOS	2025-07-30
CVE-2025-43247 MEDIUM 5.5 macOS 2025-07-30 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicio…	MEDIUM 5.5	—	macOS	2025-07-30

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM