Vulnerabilities

Tracked app vulnerabilities

110 CVEs affect a tracked app or OS (Critical, iOS). 6 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 110
Actively exploited: 6
Publication window: 2019-06-14 → 2026-10-26

All CVEs 110 CISA KEV 6 Public exploit 1 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

110 entries Critical iOS Clear all

CVE	Severity	KEV	Apps	Published
CVE-2023-5841 CRITICAL 9.1 iOS macOS 2024-02-01 Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing…	CRITICAL 9.1	—	iOS macOS	2024-02-01
CVE-2022-36934 CRITICAL 9.8 2022-09-22 An integer overflow in WhatsApp could result in remote code execution in an established video call.	CRITICAL 9.8	—		2022-09-22
CVE-2022-28755 CRITICAL 9.6 2022-08-11 The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. If a malicious…	CRITICAL 9.6	—		2022-08-11
CVE-2021-24043 CRITICAL 9.1 2022-02-02 A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.…	CRITICAL 9.1	—		2022-02-02
CVE-2021-24042 CRITICAL 9.8 2022-01-04 The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Bu…	CRITICAL 9.8	—		2022-01-04
CVE-2021-24026 CRITICAL 9.8 2021-04-06 A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v…	CRITICAL 9.8	—		2021-04-06
CVE-2020-1909 CRITICAL 9.8 WhatsApp 2020-11-03 A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory cor…	CRITICAL 9.8	—	WhatsApp	2020-11-03
CVE-2020-1907 CRITICAL 9.8 2020-10-06 A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsA…	CRITICAL 9.8	—		2020-10-06
CVE-2020-1891 CRITICAL 9.8 2020-09-03 A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone p…	CRITICAL 9.8	—		2020-09-03
CVE-2018-20655 CRITICAL 9.8 WhatsApp 2019-06-14 When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects …	CRITICAL 9.8	—	WhatsApp	2019-06-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM