Vulnerabilities

Tracked app vulnerabilities

3,840 CVEs affect a tracked app or OS (Medium, macOS). 9 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 3,840
Actively exploited: 9
Publication window: 2009-08-11 → 2026-11-10

All CVEs 3,840 CISA KEV 9 Public exploit 11 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

3,840 entries Medium macOS Clear all

CVE	Severity	KEV	Apps	Published
CVE-2026-28877 MEDIUM 5.5 iOS macOS 2026-03-25 An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Sequo…	MEDIUM 5.5	—	iOS macOS	2026-03-25
CVE-2026-28871 MEDIUM 4.3 iOS macOS 2026-03-25 A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4.…	MEDIUM 4.3	—	iOS macOS	2026-03-25
CVE-2026-28870 MEDIUM 5.5 iOS macOS 2026-03-25 An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.…	MEDIUM 5.5	—	iOS macOS	2026-03-25
CVE-2026-28868 MEDIUM 5.5 iOS macOS 2026-03-25 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5…	MEDIUM 5.5	—	iOS macOS	2026-03-25
CVE-2026-28867 MEDIUM 6.2 iOS macOS 2026-03-25 This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, mac…	MEDIUM 6.2	—	iOS macOS	2026-03-25
CVE-2026-28866 MEDIUM 6.2 iOS macOS 2026-03-25 This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.…	MEDIUM 6.2	—	iOS macOS	2026-03-25
CVE-2026-28862 MEDIUM 5.3 macOS 2026-03-25 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tah…	MEDIUM 5.3	—	macOS	2026-03-25
CVE-2026-28861 MEDIUM 4.3 iOS macOS 2026-03-25 A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS T…	MEDIUM 4.3	—	iOS macOS	2026-03-25
CVE-2026-28859 MEDIUM 4.3 iOS macOS 2026-03-25 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4…	MEDIUM 4.3	—	iOS macOS	2026-03-25
CVE-2026-28857 MEDIUM 6.5 iOS macOS 2026-03-25 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processin…	MEDIUM 6.5	—	iOS macOS	2026-03-25
CVE-2026-28852 MEDIUM 5.5 iOS macOS 2026-03-25 A stack overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.…	MEDIUM 5.5	—	iOS macOS	2026-03-25
CVE-2026-28845 MEDIUM 5.5 macOS 2026-03-25 An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.4. An app may be able to access protected user data.	MEDIUM 5.5	—	macOS	2026-03-25
CVE-2026-28844 MEDIUM 6.5 macOS 2026-03-25 A file access issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.4. An attacker may gain access to protected parts of th…	MEDIUM 6.5	—	macOS	2026-03-25
CVE-2026-28841 MEDIUM 6.2 macOS 2026-03-25 A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and u…	MEDIUM 6.2	—	macOS	2026-03-25
CVE-2026-28839 MEDIUM 5.3 macOS 2026-03-25 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access …	MEDIUM 5.3	—	macOS	2026-03-25
CVE-2026-28838 MEDIUM 5.3 macOS 2026-03-25 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An …	MEDIUM 5.3	—	macOS	2026-03-25
CVE-2026-28835 MEDIUM 6.5 macOS 2026-03-25 A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Mount…	MEDIUM 6.5	—	macOS	2026-03-25
CVE-2026-28834 MEDIUM 5.1 macOS 2026-03-25 A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be …	MEDIUM 5.1	—	macOS	2026-03-25
CVE-2026-28833 MEDIUM 6.2 iOS macOS 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. An app may be…	MEDIUM 6.2	—	iOS macOS	2026-03-25
CVE-2026-28831 MEDIUM 5.5 macOS 2026-03-25 An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app…	MEDIUM 5.5	—	macOS	2026-03-25
CVE-2026-28829 MEDIUM 5.5 macOS 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may …	MEDIUM 5.5	—	macOS	2026-03-25
CVE-2026-28828 MEDIUM 5.3 macOS 2026-03-25 A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app m…	MEDIUM 5.3	—	macOS	2026-03-25
CVE-2026-28826 MEDIUM 4.0 macOS 2026-03-25 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A malicious app may…	MEDIUM 4.0	—	macOS	2026-03-25
CVE-2026-28824 MEDIUM 5.3 macOS 2026-03-25 An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app…	MEDIUM 5.3	—	macOS	2026-03-25
CVE-2026-28823 MEDIUM 4.9 macOS 2026-03-25 A path handling issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.4. An app with root privileges may be able to delete protec…	MEDIUM 4.9	—	macOS	2026-03-25
CVE-2026-28822 MEDIUM 6.2 iOS macOS 2026-03-25 A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5,…	MEDIUM 6.2	—	iOS macOS	2026-03-25
CVE-2026-28820 MEDIUM 5.3 macOS 2026-03-25 This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.	MEDIUM 5.3	—	macOS	2026-03-25
CVE-2026-28818 MEDIUM 5.3 macOS 2026-03-25 A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be a…	MEDIUM 5.3	—	macOS	2026-03-25
CVE-2026-28816 MEDIUM 4.0 macOS 2026-03-25 A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be…	MEDIUM 4.0	—	macOS	2026-03-25
CVE-2026-20699 MEDIUM 6.2 macOS 2026-03-25 A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, mac…	MEDIUM 6.2	—	macOS	2026-03-25
CVE-2026-20697 MEDIUM 5.3 macOS 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may …	MEDIUM 5.3	—	macOS	2026-03-25
CVE-2026-20695 MEDIUM 6.2 macOS 2026-03-25 An information disclosure issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26…	MEDIUM 6.2	—	macOS	2026-03-25
CVE-2026-20694 MEDIUM 5.5 macOS iOS 2026-03-25 This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sequoia 15.7.5, macOS…	MEDIUM 5.5	—	macOS iOS	2026-03-25
CVE-2026-20693 MEDIUM 4.9 macOS 2026-03-25 This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An attacker wit…	MEDIUM 4.9	—	macOS	2026-03-25
CVE-2026-20692 MEDIUM 5.3 iOS macOS 2026-03-25 A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 1…	MEDIUM 5.3	—	iOS macOS	2026-03-25
CVE-2026-20691 MEDIUM 4.3 iOS macOS 2026-03-25 An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 2…	MEDIUM 4.3	—	iOS macOS	2026-03-25
CVE-2026-20690 MEDIUM 6.5 iOS macOS 2026-03-25 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS…	MEDIUM 6.5	—	iOS macOS	2026-03-25
CVE-2026-20670 MEDIUM 5.5 macOS 2026-03-25 An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app…	MEDIUM 5.5	—	macOS	2026-03-25
CVE-2026-20668 MEDIUM 5.5 macOS iOS 2026-03-25 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5…	MEDIUM 5.5	—	macOS iOS	2026-03-25
CVE-2026-20665 MEDIUM 6.5 iOS macOS 2026-03-25 This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS T…	MEDIUM 6.5	—	iOS macOS	2026-03-25
CVE-2026-20664 MEDIUM 4.3 iOS macOS 2026-03-25 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processin…	MEDIUM 4.3	—	iOS macOS	2026-03-25
CVE-2026-20657 MEDIUM 6.5 iOS macOS 2026-03-25 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequo…	MEDIUM 6.5	—	iOS macOS	2026-03-25
CVE-2026-20651 MEDIUM 6.2 macOS 2026-03-25 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An…	MEDIUM 6.2	—	macOS	2026-03-25
CVE-2026-20637 MEDIUM 6.2 macOS iOS 2026-03-25 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequ…	MEDIUM 6.2	—	macOS iOS	2026-03-25
CVE-2026-20633 MEDIUM 5.5 macOS 2026-03-25 This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be …	MEDIUM 5.5	—	macOS	2026-03-25
CVE-2026-20632 MEDIUM 5.3 macOS 2026-03-25 A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to …	MEDIUM 5.3	—	macOS	2026-03-25
CVE-2026-20607 MEDIUM 4.0 macOS 2026-03-25 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may …	MEDIUM 4.0	—	macOS	2026-03-25
CVE-2026-4453 MEDIUM 4.3 2026-03-20 Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium…	MEDIUM 4.3	—		2026-03-20
CVE-2026-20643 MEDIUM 5.4 iOS macOS 2026-03-17 A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadO…	MEDIUM 5.4	—	iOS macOS	2026-03-17
CVE-2026-3942 MEDIUM 4.3 2026-03-11 Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Ch…	MEDIUM 4.3	—		2026-03-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM