Vulnerabilities

Tracked app vulnerabilities

28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,052
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-20

All CVEs 28,052 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,052 entries

CVE	Severity	KEV	Apps	Published
CVE-2024-49738 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-49737 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-49736 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-49735 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-49734 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-49733 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-49732 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-49724 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-45558 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-45553 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-43771 CRITICAL · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2025-01-01
CVE-2024-43770 CRITICAL · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2025-01-01
CVE-2024-43765 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-43763 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-43704 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-43096 CRITICAL · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2025-01-01
CVE-2024-43095 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-34730 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-34722 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-21464 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-20154 CRITICAL · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2025-01-01
CVE-2024-20148 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-20146 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-20145 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-20144 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-20143 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-20140 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-20105 HIGH · vendor Android 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2025-01-01
CVE-2024-44298 LOW 3.3 macOS 2024-12-20 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access inf…	LOW 3.3	—	macOS	2024-12-20
CVE-2024-44293 MEDIUM 5.5 macOS 2024-12-20 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. A user may be able to view sensi…	MEDIUM 5.5	—	macOS	2024-12-20
CVE-2024-44292 MEDIUM 5.5 macOS 2024-12-20 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sen…	MEDIUM 5.5	—	macOS	2024-12-20
CVE-2024-44231 MEDIUM 4.6 macOS 2024-12-20 This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with physical access to a Mac may be able to by…	MEDIUM 4.6	—	macOS	2024-12-20
CVE-2024-44223 MEDIUM 4.6 macOS 2024-12-20 This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with physical access to a Mac may be able to…	MEDIUM 4.6	—	macOS	2024-12-20
CVE-2024-44211 MEDIUM 5.5 macOS 2024-12-20 This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data.	MEDIUM 5.5	—	macOS	2024-12-20
CVE-2024-44195 HIGH 7.5 macOS 2024-12-20 A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to read arbitrary files.	HIGH 7.5	—	macOS	2024-12-20
CVE-2024-54538 HIGH 7.5 iOS macOS 2024-12-20 A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Se…	HIGH 7.5	—	iOS macOS	2024-12-20
CVE-2024-43106 HIGH 7.1 Microsoft Excel 2024-12-18 A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a p…	HIGH 7.1	—	Microsoft Excel	2024-12-18
CVE-2024-42220 HIGH 7.1 Microsoft Outlook 2024-12-18 A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading …	HIGH 7.1	—	Microsoft Outlook	2024-12-18
CVE-2024-41165 HIGH 7.1 Microsoft Word 2024-12-18 A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a per…	HIGH 7.1	—	Microsoft Word	2024-12-18
CVE-2024-39804 HIGH 7.1 Microsoft PowerPoint 2024-12-18 A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, lead…	HIGH 7.1	—	Microsoft PowerPoint	2024-12-18
CVE-2024-12695 HIGH 8.8 2024-12-18 Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page…	HIGH 8.8	—		2024-12-18
CVE-2024-12694 HIGH 8.8 2024-12-18 Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…	HIGH 8.8	—		2024-12-18
CVE-2024-12693 HIGH 8.8 2024-12-18 Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H…	HIGH 8.8	—		2024-12-18
CVE-2024-12692 HIGH 8.8 2024-12-18 Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…	HIGH 8.8	—		2024-12-18
CVE-2024-54534 CRITICAL 9.8 iOS macOS 2024-12-12 The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18…	CRITICAL 9.8	—	iOS macOS	2024-12-12
CVE-2024-54531 MEDIUM 5.5 macOS 2024-12-12 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. An app may be able to bypass kASLR.	MEDIUM 5.5	—	macOS	2024-12-12
CVE-2024-54529 HIGH 7.8 macOS 2024-12-12 A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to e…	HIGH 7.8	—	macOS	2024-12-12
CVE-2024-54528 HIGH 7.1 macOS 2024-12-12 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be abl…	HIGH 7.1	—	macOS	2024-12-12
CVE-2024-54527 MEDIUM 5.5 iOS macOS 2024-12-12 This issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, …	MEDIUM 5.5	—	iOS macOS	2024-12-12
CVE-2024-54526 MEDIUM 5.5 iOS macOS 2024-12-12 The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, t…	MEDIUM 5.5	—	iOS macOS	2024-12-12

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM