Vulnerabilities

Tracked app vulnerabilities

3,840 CVEs affect a tracked app or OS (Medium, macOS). 9 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 3,840
Actively exploited: 9
Publication window: 2009-08-11 → 2026-11-10

All CVEs 3,840 CISA KEV 9 Public exploit 11 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

3,840 entries Medium macOS Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-27841 MEDIUM 5.5 iOS macOS 2024-05-14 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to disclose kerne…	MEDIUM 5.5	—	iOS macOS	2024-05-14
CVE-2024-27834 MEDIUM 5.5 KEV iOS macOS 2024-05-14 The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tv…	MEDIUM 5.5	KEV	iOS macOS	2024-05-14
CVE-2024-27827 MEDIUM 5.5 macOS 2024-05-14 This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to read arbitrar…	MEDIUM 5.5	—	macOS	2024-05-14
CVE-2024-27821 MEDIUM 4.7 iOS macOS 2024-05-14 A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A shortcut may …	MEDIUM 4.7	—	iOS macOS	2024-05-14
CVE-2024-27816 MEDIUM 5.5 iOS macOS 2024-05-14 A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker may …	MEDIUM 5.5	—	iOS macOS	2024-05-14
CVE-2024-27810 MEDIUM 5.5 iOS macOS 2024-05-14 A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS …	MEDIUM 5.5	—	iOS macOS	2024-05-14
CVE-2024-27804 MEDIUM 5.5 iOS macOS 2024-05-14 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.3, watchOS 10.…	MEDIUM 5.5	—	iOS macOS	2024-05-14
CVE-2024-27789 MEDIUM 5.5 iOS macOS 2024-05-14 A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura …	MEDIUM 5.5	—	iOS macOS	2024-05-14
CVE-2024-23236 MEDIUM 5.5 macOS 2024-05-14 A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to read arbitrary files.	MEDIUM 5.5	—	macOS	2024-05-14
CVE-2024-23229 MEDIUM 5.5 macOS 2024-05-14 This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.…	MEDIUM 5.5	—	macOS	2024-05-14
CVE-2024-4559 MEDIUM 6.5 2024-05-07 Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	MEDIUM 6.5	—		2024-05-07
CVE-2024-4060 MEDIUM 6.5 2024-05-01 Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…	MEDIUM 6.5	—		2024-05-01
CVE-2024-4059 MEDIUM 6.5 2024-05-01 Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. (Chromium secur…	MEDIUM 6.5	—		2024-05-01
CVE-2024-23271 MEDIUM 6.5 iOS macOS 2024-04-24 A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A m…	MEDIUM 6.5	—	iOS macOS	2024-04-24
CVE-2024-3914 MEDIUM 6.5 2024-04-17 Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…	MEDIUM 6.5	—		2024-04-17
CVE-2024-3847 MEDIUM 6.1 2024-04-17 Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML…	MEDIUM 6.1	—		2024-04-17
CVE-2024-3846 MEDIUM 4.3 2024-04-17 Inappropriate implementation in Prompts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gesture…	MEDIUM 4.3	—		2024-04-17
CVE-2024-3845 MEDIUM 4.3 2024-04-17 Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML pa…	MEDIUM 4.3	—		2024-04-17
CVE-2024-3844 MEDIUM 4.3 2024-04-17 Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted Chrome Extens…	MEDIUM 4.3	—		2024-04-17
CVE-2024-3843 MEDIUM 4.3 2024-04-17 Insufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Ch…	MEDIUM 4.3	—		2024-04-17
CVE-2024-3841 MEDIUM 6.1 2024-04-17 Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged …	MEDIUM 6.1	—		2024-04-17
CVE-2024-3839 MEDIUM 6.5 2024-04-17 Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sensitive information from process memory v…	MEDIUM 6.5	—		2024-04-17
CVE-2024-3838 MEDIUM 5.5 2024-04-17 Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform…	MEDIUM 5.5	—		2024-04-17
CVE-2024-3516 MEDIUM 6.5 2024-04-10 Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…	MEDIUM 6.5	—		2024-04-10
CVE-2024-3515 MEDIUM 6.5 2024-04-10 Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…	MEDIUM 6.5	—		2024-04-10
CVE-2024-27247 MEDIUM 5.5 Zoom 2024-04-09 Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of…	MEDIUM 5.5	—	Zoom	2024-04-09
CVE-2023-42893 MEDIUM 5.5 iOS macOS 2024-03-28 A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3,…	MEDIUM 5.5	—	iOS macOS	2024-03-28
CVE-2024-2466 MEDIUM 6.5 macOS 2024-03-27 libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly av…	MEDIUM 6.5	—	macOS	2024-03-27
CVE-2024-2379 MEDIUM 6.3 macOS 2024-03-27 libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or c…	MEDIUM 6.3	—	macOS	2024-03-27
CVE-2024-1580 MEDIUM · vendor macOS iOS 2024-03-25 [Apple CoreMedia] Processing an image may lead to arbitrary code execution	MEDIUM · vendor	—	macOS iOS	2024-03-25
CVE-2024-2631 MEDIUM 4.3 2024-03-20 Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium…	MEDIUM 4.3	—		2024-03-20
CVE-2024-2630 MEDIUM 6.5 2024-03-20 Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chrom…	MEDIUM 6.5	—		2024-03-20
CVE-2024-2629 MEDIUM 4.3 2024-03-20 Incorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium securi…	MEDIUM 4.3	—		2024-03-20
CVE-2024-2628 MEDIUM 4.3 2024-03-20 Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium…	MEDIUM 4.3	—		2024-03-20
CVE-2024-2626 MEDIUM 6.5 2024-03-20 Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML p…	MEDIUM 6.5	—		2024-03-20
CVE-2024-23298 MEDIUM 5.5 Xcode 2024-03-15 A logic issue was addressed with improved state management. This issue is fixed in Xcode 15.3. An app may bypass Gatekeeper checks.	MEDIUM 5.5	—	Xcode	2024-03-15
CVE-2024-23293 MEDIUM 4.6 macOS iOS 2024-03-08 This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An att…	MEDIUM 4.6	—	macOS iOS	2024-03-08
CVE-2024-23290 MEDIUM 5.5 macOS iOS 2024-03-08 A logic issue was addressed with improved restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23287 MEDIUM 5.5 macOS iOS 2024-03-08 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An a…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23285 MEDIUM 5.5 macOS 2024-03-08 This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.4. An app may be able to create symlinks to protected regio…	MEDIUM 5.5	—	macOS	2024-03-08
CVE-2024-23284 MEDIUM 6.5 macOS iOS 2024-03-08 A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS S…	MEDIUM 6.5	—	macOS iOS	2024-03-08
CVE-2024-23283 MEDIUM 5.5 macOS iOS 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4,…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23281 MEDIUM 5.5 macOS 2024-03-08 This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.4. An app may be able to access sensitive user data.	MEDIUM 5.5	—	macOS	2024-03-08
CVE-2024-23280 MEDIUM 6.5 macOS iOS 2024-03-08 An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS …	MEDIUM 6.5	—	macOS iOS	2024-03-08
CVE-2024-23279 MEDIUM 5.5 macOS 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user…	MEDIUM 5.5	—	macOS	2024-03-08
CVE-2024-23277 MEDIUM 5.9 macOS iOS 2024-03-08 The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An attacker in a privileged network position …	MEDIUM 5.9	—	macOS iOS	2024-03-08
CVE-2024-23275 MEDIUM 4.7 macOS 2024-03-08 A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be…	MEDIUM 4.7	—	macOS	2024-03-08
CVE-2024-23273 MEDIUM 4.3 macOS iOS 2024-03-08 This issue was addressed through improved state management. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Private Browsing t…	MEDIUM 4.3	—	macOS iOS	2024-03-08
CVE-2024-23272 MEDIUM 5.5 macOS 2024-03-08 A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An attacker may gain a…	MEDIUM 5.5	—	macOS	2024-03-08
CVE-2024-23269 MEDIUM 5.5 macOS 2024-03-08 A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Monterey 12.7.4, ma…	MEDIUM 5.5	—	macOS	2024-03-08

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM