Vulnerabilities

Tracked app vulnerabilities

236 CVEs affect a tracked app or OS (Low, macOS). 0 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 236
Actively exploited: 0
Publication window: 2015-05-21 → 2026-09-17

All CVEs 236 CISA KEV 0 Public exploit 1 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

236 entries Low macOS Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-40822 LOW 2.4 iOS macOS 2024-07-29 This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macO…	LOW 2.4	—	iOS macOS	2024-07-29
CVE-2024-40798 LOW 3.3 iOS macOS 2024-07-29 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS So…	LOW 3.3	—	iOS macOS	2024-07-29
CVE-2024-40795 LOW 3.3 iOS macOS 2024-07-29 This issue was addressed with improved data protection. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, watchOS 10.6. An app may…	LOW 3.3	—	iOS macOS	2024-07-29
CVE-2024-40778 LOW 3.3 iOS macOS 2024-07-29 An authentication issue was addressed with improved state management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sono…	LOW 3.3	—	iOS macOS	2024-07-29
CVE-2024-27862 LOW 2.4 macOS 2024-07-29 A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.6. Enabling Lockdown Mode while setting up a Mac may cause F…	LOW 2.4	—	macOS	2024-07-29
CVE-2023-38546 LOW · vendor macOS 2024-06-11 Microsoft Security Update Guide entry — NVD enrichira.	LOW · vendor	—	macOS	2024-06-11
CVE-2024-27799 LOW 3.3 iOS macOS 2024-06-10 This issue was addressed with additional entitlement checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Sonoma 14.5, mac…	LOW 3.3	—	iOS macOS	2024-06-10
CVE-2024-27837 LOW 3.3 macOS 2024-05-14 A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. A local attacker may gain access to Keycha…	LOW 3.3	—	macOS	2024-05-14
CVE-2024-23292 LOW 3.3 macOS iOS 2024-03-08 This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access inform…	LOW 3.3	—	macOS iOS	2024-03-08
CVE-2024-23291 LOW 3.3 macOS iOS 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17…	LOW 3.3	—	macOS iOS	2024-03-08
CVE-2024-23289 LOW 3.3 macOS iOS 2024-03-08 A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 1…	LOW 3.3	—	macOS iOS	2024-03-08
CVE-2024-23257 LOW 3.3 macOS iOS 2024-03-08 The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ven…	LOW 3.3	—	macOS iOS	2024-03-08
CVE-2024-23255 LOW 2.4 macOS iOS 2024-03-08 An authentication issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Photos in the Hidden …	LOW 2.4	—	macOS iOS	2024-03-08
CVE-2024-23253 LOW 3.3 macOS 2024-03-08 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to access a user's Photos Library.	LOW 3.3	—	macOS	2024-03-08
CVE-2024-23245 LOW 3.3 macOS 2024-03-08 This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5…	LOW 3.3	—	macOS	2024-03-08
CVE-2024-23242 LOW 3.3 macOS iOS 2024-03-08 A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to…	LOW 3.3	—	macOS iOS	2024-03-08
CVE-2024-23238 LOW 3.3 macOS 2024-03-08 An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to edit NVRAM variables.	LOW 3.3	—	macOS	2024-03-08
CVE-2024-23232 LOW 3.3 macOS 2024-03-08 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14.4. An app may be able to capture a user's scree…	LOW 3.3	—	macOS	2024-03-08
CVE-2024-23227 LOW 3.3 macOS 2024-03-08 This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.…	LOW 3.3	—	macOS	2024-03-08
CVE-2024-23743 LOW 3.3 2024-01-28 Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must lau…	LOW 3.3	—		2024-01-28
CVE-2024-23217 LOW 3.3 macOS iOS 2024-01-23 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6…	LOW 3.3	—	macOS iOS	2024-01-23
CVE-2024-23211 LOW 3.3 iOS macOS 2024-01-23 A privacy issue was addressed with improved handling of user preferences. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS…	LOW 3.3	—	iOS macOS	2024-01-23
CVE-2024-23210 LOW 3.3 iOS macOS 2024-01-23 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watch…	LOW 3.3	—	iOS macOS	2024-01-23
CVE-2023-43588 LOW 3.5 Zoom 2023-11-15 Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.	LOW 3.5	—	Zoom	2023-11-15
CVE-2023-39206 LOW 3.7 2023-11-14 Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.	LOW 3.7	—		2023-11-14
CVE-2023-38039 LOW · vendor macOS Windows 2023-10-10 Hackerone: CVE-2023-38039 HTTP headers eat all memory	LOW · vendor	—	macOS Windows	2023-10-10
CVE-2022-4923 LOW 3.1 2023-07-29 Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an attacker in a privileged network position to perform a man-in-the-mid…	LOW 3.1	—		2023-07-29
CVE-2021-37964 LOW 3.3 2021-10-08 Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allowed an attacker with a rogue wireless access point t…	LOW 3.3	—		2021-10-08
CVE-2020-17020 LOW 3.3 2020-11-11 Microsoft Word Security Feature Bypass Vulnerability	LOW 3.3	—		2020-11-11
CVE-2019-13762 LOW 3.3 2019-12-10 Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local cod…	LOW 3.3	—		2019-12-10
CVE-2019-13679 LOW 3.3 2019-11-25 Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file.	LOW 3.3	—		2019-11-25
CVE-2018-6053 LOW 3.3 2018-09-25 Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing b…	LOW 3.3	—		2018-09-25
CVE-2018-0919 LOW 3.3 2018-03-14 Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft …	LOW 3.3	—		2018-03-14
CVE-2016-5166 LOW 3.1 2016-09-11 The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:…	LOW 3.1	—		2016-09-11
CVE-2015-1283 LOW · vendor +1 Android 2015-07-23 Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote …	LOW · vendor	—	+1 Android	2015-07-23
CVE-2015-4000 LOW 3.7 +1 2015-05-21 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which…	LOW 3.7	—	+1	2015-05-21

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM