Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,052
Actively exploited
374
Publication window
1997-01-01 → 2026-10-20
All CVEs 28,052 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,052 entries
CVE
CVE-2025-21254
HIGH · vendor
Windows

Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21216
HIGH · vendor
Windows

Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21212
HIGH · vendor
Windows

Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21208
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2025-21201
HIGH · vendor
Windows

Windows Telephony Server Remote Code Execution Vulnerability
CVE-2025-21200
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21190
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21184
HIGH · vendor
Windows

Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-21183
HIGH · vendor
Windows

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-21182
HIGH · vendor
Windows

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-21181
HIGH · vendor
Windows

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21179
HIGH · vendor
Windows

DHCP Client Service Denial of Service Vulnerability
CVE-2025-24200
MEDIUM 6.1 KEV
iOS

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 1…
CVE-2024-54658
MEDIUM 6.5
macOS iOS

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1…
CVE-2024-27859
HIGH 8.8
macOS iOS

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.…
CVE-2025-21253
MEDIUM 5.3
Microsoft Edge Microsoft Edge

Microsoft Edge for IOS and Android Spoofing Vulnerability
CVE-2025-0451
MEDIUM 6.3
Chrome Google Chrome

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI …
CVE-2025-0445
MEDIUM 5.4
Chrome Google Chrome

Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…
CVE-2025-0444
MEDIUM 6.3
Chrome Google Chrome

Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…
CVE-2025-1020
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s…
CVE-2025-1019
MEDIUM 4.3
Mozilla Thunderbird Mozilla Firefox

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. …
CVE-2025-1018
MEDIUM 5.3
Mozilla Thunderbird Mozilla Firefox

The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential sp…
CVE-2025-1017
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption a…
CVE-2025-1016
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bug…
CVE-2025-1015
MEDIUM 5.4
Mozilla Thunderbird

The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malici…
CVE-2025-1014
HIGH 8.8
Mozilla Thunderbird Mozilla Firefox

Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. This vulnerability was fixed in Fir…
CVE-2025-1013
MEDIUM 6.5
Mozilla Thunderbird Mozilla Firefox

A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak. This vu…
CVE-2025-1012
HIGH 7.5
Mozilla Thunderbird Mozilla Firefox

A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7,…
CVE-2025-1011
HIGH 8.8
Mozilla Thunderbird Mozilla Firefox

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vul…
CVE-2025-1010
HIGH 8.8
Mozilla Thunderbird Mozilla Firefox

An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefo…
CVE-2025-1009
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, …
CVE-2025-0510
MEDIUM 6.5
Mozilla Thunderbird

Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vu…
CVE-2025-20636
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-20635
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-20634
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0100
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0099
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0098
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0097
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0096
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0095
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0094
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0091
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0088
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-0015
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-53104
HIGH · vendor KEV
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-52935
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-49843
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-49839
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-49834
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM