Vulnerabilities

Tracked app vulnerabilities

3,840 CVEs affect a tracked app or OS (Medium, macOS). 9 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 3,840
Actively exploited: 9
Publication window: 2009-08-11 → 2026-11-10

All CVEs 3,840 CISA KEV 9 Public exploit 11 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

3,840 entries Medium macOS Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-40782 MEDIUM 6.5 iOS macOS 2024-07-29 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.…	MEDIUM 6.5	—	iOS macOS	2024-07-29
CVE-2024-40780 MEDIUM 5.5 iOS macOS 2024-07-29 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, …	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-40779 MEDIUM 5.5 iOS macOS 2024-07-29 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, …	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-40777 MEDIUM 5.5 iOS macOS 2024-07-29 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visio…	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-40776 MEDIUM 4.3 iOS macOS 2024-07-29 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.…	MEDIUM 4.3	—	iOS macOS	2024-07-29
CVE-2024-40775 MEDIUM 5.5 macOS 2024-07-29 A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.…	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-27888 MEDIUM 5.5 macOS 2024-07-29 A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sonoma 14.4. An app may be able to mod…	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-27887 MEDIUM 5.5 macOS 2024-07-29 A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-27886 MEDIUM 5.5 macOS 2024-07-29 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. An unprivileged app may be able to log ke…	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-27884 MEDIUM 5.5 iOS macOS 2024-07-29 This issue was addressed with a new entitlement. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An …	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-27883 MEDIUM 4.4 macOS 2024-07-29 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app m…	MEDIUM 4.4	—	macOS	2024-07-29
CVE-2024-27882 MEDIUM 4.4 macOS 2024-07-29 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app m…	MEDIUM 4.4	—	macOS	2024-07-29
CVE-2024-27881 MEDIUM 5.3 macOS 2024-07-29 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Vent…	MEDIUM 5.3	—	macOS	2024-07-29
CVE-2024-27878 MEDIUM 6.7 macOS 2024-07-29 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code wit…	MEDIUM 6.7	—	macOS	2024-07-29
CVE-2024-27877 MEDIUM 6.1 macOS 2024-07-29 The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Processing a mali…	MEDIUM 6.1	—	macOS	2024-07-29
CVE-2024-27873 MEDIUM 5.5 iOS macOS 2024-07-29 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS…	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-27872 MEDIUM 5.5 macOS 2024-07-29 This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.6. An app may be able to access protected user data.	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-27871 MEDIUM 5.5 iOS macOS 2024-07-29 A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. An app may be able to access …	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-27863 MEDIUM 5.5 iOS macOS 2024-07-29 An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sono…	MEDIUM 5.5	—	iOS macOS	2024-07-29
CVE-2024-27853 MEDIUM 4.4 macOS 2024-07-29 This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A maliciously crafted ZIP archive may bypass Gatekeeper checks.	MEDIUM 4.4	—	macOS	2024-07-29
CVE-2024-27823 MEDIUM 5.9 iOS macOS 2024-07-29 A race condition was addressed with improved locking. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, mac…	MEDIUM 5.9	—	iOS macOS	2024-07-29
CVE-2024-27809 MEDIUM 5.5 macOS 2024-07-29 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user…	MEDIUM 5.5	—	macOS	2024-07-29
CVE-2024-5500 MEDIUM 6.5 2024-07-16 Inappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a remote attacker to bypass navigation restrictions via a crafted HTML pag…	MEDIUM 6.5	—		2024-07-16
CVE-2024-3175 MEDIUM 6.3 2024-07-16 Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform privilege escalation via a crafted Chro…	MEDIUM 6.3	—		2024-07-16
CVE-2024-2884 MEDIUM 6.5 2024-07-16 Out of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HT…	MEDIUM 6.5	—		2024-07-16
CVE-2023-7013 MEDIUM 4.7 2024-07-16 Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially spoof security UI via a crafted H…	MEDIUM 4.7	—		2024-07-16
CVE-2023-7011 MEDIUM 6.5 2024-07-16 Inappropriate implementation in Picture in Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to spoof the contents of the Omnibox (URL…	MEDIUM 6.5	—		2024-07-16
CVE-2020-36765 MEDIUM 6.5 2024-07-16 Insufficient policy enforcement in Navigation in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML pag…	MEDIUM 6.5	—		2024-07-16
CVE-2024-6777 MEDIUM 6.5 2024-07-16 Use after free in Navigation in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to potentially …	MEDIUM 6.5	—		2024-07-16
CVE-2024-38020 MEDIUM 6.5 2024-07-09 Microsoft Outlook Spoofing Vulnerability	MEDIUM 6.5	—		2024-07-09
CVE-2024-5843 MEDIUM 6.5 2024-06-11 Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chr…	MEDIUM 6.5	—		2024-06-11
CVE-2024-5840 MEDIUM 6.5 2024-06-11 Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromi…	MEDIUM 6.5	—		2024-06-11
CVE-2024-5839 MEDIUM 6.5 2024-06-11 Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a…	MEDIUM 6.5	—		2024-06-11
CVE-2024-27885 MEDIUM 6.3 macOS 2024-06-10 This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app ma…	MEDIUM 6.3	—	macOS	2024-06-10
CVE-2024-27850 MEDIUM 6.5 iOS macOS 2024-06-10 This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, v…	MEDIUM 6.5	—	iOS macOS	2024-06-10
CVE-2024-27844 MEDIUM 5.5 Safari macOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in Safari 17.5, macOS Sonoma 14.5, visionOS 1.2. A website's permission dialog may persist af…	MEDIUM 5.5	—	Safari macOS	2024-06-10
CVE-2024-27840 MEDIUM 6.3 iOS macOS 2024-06-10 The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, ma…	MEDIUM 6.3	—	iOS macOS	2024-06-10
CVE-2024-27838 MEDIUM 6.5 iOS macOS 2024-06-10 The issue was addressed by adding additional logic. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14…	MEDIUM 6.5	—	iOS macOS	2024-06-10
CVE-2024-27830 MEDIUM 6.5 iOS macOS 2024-06-10 This issue was addressed through improved state management. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionO…	MEDIUM 6.5	—	iOS macOS	2024-06-10
CVE-2024-27806 MEDIUM 5.5 iOS macOS 2024-06-10 This issue was addressed with improved environment sanitization. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey …	MEDIUM 5.5	—	iOS macOS	2024-06-10
CVE-2024-27805 MEDIUM 5.5 iOS macOS 2024-06-10 An issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS …	MEDIUM 5.5	—	iOS macOS	2024-06-10
CVE-2024-27800 MEDIUM 6.5 iOS macOS 2024-06-10 This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5,…	MEDIUM 6.5	—	iOS macOS	2024-06-10
CVE-2024-23282 MEDIUM 5.5 iOS macOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A…	MEDIUM 5.5	—	iOS macOS	2024-06-10
CVE-2024-23251 MEDIUM 4.6 iOS macOS 2024-06-10 An authentication issue was addressed with improved state management. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sono…	MEDIUM 4.6	—	iOS macOS	2024-06-10
CVE-2024-27792 MEDIUM 5.5 macOS 2024-06-10 This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive…	MEDIUM 5.5	—	macOS	2024-06-10
CVE-2023-40389 MEDIUM 5.5 macOS 2024-06-10 The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be a…	MEDIUM 5.5	—	macOS	2024-06-10
CVE-2024-4950 MEDIUM 6.5 2024-05-15 Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specific UI gestu…	MEDIUM 6.5	—		2024-05-15
CVE-2024-4949 MEDIUM 6.5 2024-05-15 Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…	MEDIUM 6.5	—		2024-05-15
CVE-2024-4948 MEDIUM 6.5 2024-05-15 Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…	MEDIUM 6.5	—		2024-05-15
CVE-2024-27847 MEDIUM 5.5 iOS macOS 2024-05-14 This issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sono…	MEDIUM 5.5	—	iOS macOS	2024-05-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM