Vulnerabilities

Tracked app vulnerabilities

1,409 CVEs affect a tracked app or OS (all severities, iOS). 28 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 1,409
Actively exploited: 28
Publication window: 2013-04-24 → 2026-11-09

All CVEs 1,409 CISA KEV 28 Public exploit 4 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

1,409 entries iOS Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-12271 MEDIUM 6.4 Dropbox 2018-06-13 An issue was discovered in the com.getdropbox.Dropbox app 100.2 for iOS. The LAContext class for Biometric (TouchID) validation allows authentication bypass by…	MEDIUM 6.4	—	Dropbox	2018-06-13
CVE-2017-17689 MEDIUM 5.9 +1 2018-05-16 The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.	MEDIUM 5.9	—	+1	2018-05-16
CVE-2018-1167 HIGH 8.8 2018-04-19 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Spotify Music Player 1.0.69.336. User interaction is requir…	HIGH 8.8	—		2018-04-19
CVE-2018-6849 MEDIUM 4.3 2018-04-01 In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), th…	MEDIUM 4.3	—		2018-04-01
CVE-2016-10511 MEDIUM 5.9 X (anciennement Twitter) 2017-09-18 The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitti…	MEDIUM 5.9	—	X (anciennement Twitter)	2017-09-18
CVE-2016-4075 MEDIUM 6.1 2017-04-21 Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL.	MEDIUM 6.1	—		2017-04-21
CVE-2017-2391 MEDIUM 5.3 +2 2017-04-02 An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3…	MEDIUM 5.3	—	+2	2017-04-02
CVE-2012-6399 N/A Webex 2013-05-27 Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 ce…	N/A	—	Webex	2013-05-27
CVE-2012-6140 N/A 2013-04-24 pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local user…	N/A	—		2013-04-24

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM