Vulnerabilities

Tracked app vulnerabilities

28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,052
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-20

All CVEs 28,052 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,052 entries

CVE	Severity	KEV	Apps	Published
CVE-2024-40797 MEDIUM 6.1 macOS 2024-09-17 This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Visiting a maliciou…	MEDIUM 6.1	—	macOS	2024-09-17
CVE-2024-40791 LOW 3.3 iOS macOS 2024-09-17 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macO…	LOW 3.3	—	iOS macOS	2024-09-17
CVE-2024-40770 HIGH 7.5 macOS 2024-09-17 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privileged user may be able to modify restricted…	HIGH 7.5	—	macOS	2024-09-17
CVE-2024-27880 MEDIUM 5.5 iOS macOS 2024-09-17 An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia …	MEDIUM 5.5	—	iOS macOS	2024-09-17
CVE-2024-27879 HIGH 7.5 iOS 2024-09-17 The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. An attacker may be able to cause un…	HIGH 7.5	—	iOS	2024-09-17
CVE-2024-27876 MEDIUM 5.5 iOS macOS 2024-09-17 A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.…	MEDIUM 5.5	—	iOS macOS	2024-09-17
CVE-2024-27875 MEDIUM 5.5 macOS 2024-09-17 A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15. Privacy Indicators for microphone or camera access may be …	MEDIUM 5.5	—	macOS	2024-09-17
CVE-2024-27874 HIGH 7.5 iOS 2024-09-17 This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A remote attacker may be able to cause a denial-of-ser…	HIGH 7.5	—	iOS	2024-09-17
CVE-2024-27869 MEDIUM 5.5 iOS macOS 2024-09-17 The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to record the screen without an…	MEDIUM 5.5	—	iOS macOS	2024-09-17
CVE-2024-27861 MEDIUM 5.5 macOS 2024-09-17 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory.	MEDIUM 5.5	—	macOS	2024-09-17
CVE-2024-27860 MEDIUM 5.5 macOS 2024-09-17 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory.	MEDIUM 5.5	—	macOS	2024-09-17
CVE-2024-27858 MEDIUM 5.5 macOS 2024-09-17 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data.	MEDIUM 5.5	—	macOS	2024-09-17
CVE-2024-27795 HIGH 7.5 macOS 2024-09-17 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet.	HIGH 7.5	—	macOS	2024-09-17
CVE-2024-23237 MEDIUM 5.5 macOS 2024-09-17 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An app may be able to cause a denial-of-service.	MEDIUM 5.5	—	macOS	2024-09-17
CVE-2024-38222 MEDIUM 6.5 Microsoft Edge 2024-09-12 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability	MEDIUM 6.5	—	Microsoft Edge	2024-09-12
CVE-2024-8639 HIGH 8.8 2024-09-11 Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted H…	HIGH 8.8	—		2024-09-11
CVE-2024-8638 HIGH 8.8 2024-09-11 Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chro…	HIGH 8.8	—		2024-09-11
CVE-2024-8637 HIGH 8.8 2024-09-11 Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a craft…	HIGH 8.8	—		2024-09-11
CVE-2024-8636 HIGH 8.8 2024-09-11 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…	HIGH 8.8	—		2024-09-11
CVE-2024-43487 MEDIUM 6.5 Windows 2024-09-10 Windows Mark of the Web Security Feature Bypass Vulnerability	MEDIUM 6.5	—	Windows	2024-09-10
CVE-2024-43482 MEDIUM 6.5 Microsoft Outlook 2024-09-10 Microsoft Outlook for iOS Information Disclosure Vulnerability	MEDIUM 6.5	—	Microsoft Outlook	2024-09-10
CVE-2024-43467 HIGH 7.5 Windows 2024-09-10 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability	HIGH 7.5	—	Windows	2024-09-10
CVE-2024-43465 HIGH 7.8 2024-09-10 Microsoft Excel Elevation of Privilege Vulnerability	HIGH 7.8	—		2024-09-10
CVE-2024-43463 HIGH 7.8 2024-09-10 Microsoft Office Visio Remote Code Execution Vulnerability	HIGH 7.8	—		2024-09-10
CVE-2024-43461 HIGH 8.8 KEV Windows 2024-09-10 Windows MSHTML Platform Spoofing Vulnerability	HIGH 8.8	KEV	Windows	2024-09-10
CVE-2024-43455 HIGH 8.8 Windows 2024-09-10 Windows Remote Desktop Licensing Service Spoofing Vulnerability	HIGH 8.8	—	Windows	2024-09-10
CVE-2024-43454 HIGH 7.1 Windows 2024-09-10 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability	HIGH 7.1	—	Windows	2024-09-10
CVE-2024-38263 HIGH 7.5 Windows 2024-09-10 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability	HIGH 7.5	—	Windows	2024-09-10
CVE-2024-38260 HIGH 8.8 Windows 2024-09-10 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability	HIGH 8.8	—	Windows	2024-09-10
CVE-2024-38259 HIGH 8.8 Windows 2024-09-10 Microsoft Management Console Remote Code Execution Vulnerability	HIGH 8.8	—	Windows	2024-09-10
CVE-2024-38258 MEDIUM 6.5 Windows 2024-09-10 Windows Remote Desktop Licensing Service Information Disclosure Vulnerability	MEDIUM 6.5	—	Windows	2024-09-10
CVE-2024-38257 HIGH 7.5 Windows 2024-09-10 Microsoft AllJoyn API Information Disclosure Vulnerability	HIGH 7.5	—	Windows	2024-09-10
CVE-2024-38256 MEDIUM 5.5 Windows 2024-09-10 Windows Kernel-Mode Driver Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2024-09-10
CVE-2024-38254 MEDIUM 5.5 Windows 2024-09-10 Windows Authentication Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2024-09-10
CVE-2024-38253 HIGH 7.8 Windows 2024-09-10 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2024-09-10
CVE-2024-38252 HIGH 7.8 Windows 2024-09-10 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2024-09-10
CVE-2024-38250 HIGH 7.8 Microsoft Office Windows 2024-09-10 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	Microsoft Office Windows	2024-09-10
CVE-2024-38249 HIGH 7.8 Windows 2024-09-10 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2024-09-10
CVE-2024-38248 HIGH 7.0 Windows 2024-09-10 Windows Storage Elevation of Privilege Vulnerability	HIGH 7.0	—	Windows	2024-09-10
CVE-2024-38247 HIGH 7.8 Windows 2024-09-10 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2024-09-10
CVE-2024-38246 HIGH 7.0 Windows 2024-09-10 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	—	Windows	2024-09-10
CVE-2024-38245 HIGH 7.8 Windows 2024-09-10 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2024-09-10
CVE-2024-38244 HIGH 7.8 Windows 2024-09-10 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2024-09-10
CVE-2024-38243 HIGH 7.8 Windows 2024-09-10 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2024-09-10
CVE-2024-38242 HIGH 7.8 Windows 2024-09-10 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2024-09-10
CVE-2024-38241 HIGH 7.8 Windows 2024-09-10 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2024-09-10
CVE-2024-38240 HIGH 8.1 Windows 2024-09-10 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	HIGH 8.1	—	Windows	2024-09-10
CVE-2024-38239 HIGH 7.2 Windows 2024-09-10 Windows Kerberos Elevation of Privilege Vulnerability	HIGH 7.2	—	Windows	2024-09-10
CVE-2024-38238 HIGH 7.8 Windows 2024-09-10 Kernel Streaming Service Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2024-09-10
CVE-2024-38237 HIGH 7.8 Windows 2024-09-10 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2024-09-10

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM