Vulnerabilities

Tracked app vulnerabilities

4,496 CVEs affect a tracked app or OS (High, macOS). 74 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 4,496
Actively exploited: 74
Publication window: 2004-07-27 → 2026-11-11

All CVEs 4,496 CISA KEV 74 Public exploit 38 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

4,496 entries High macOS Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-5830 HIGH 8.8 2024-06-11 Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chrom…	HIGH 8.8	—		2024-06-11
CVE-2024-30104 HIGH 7.8 2024-06-11 Microsoft Office Remote Code Execution Vulnerability	HIGH 7.8	—		2024-06-11
CVE-2024-30103 HIGH 8.8 2024-06-11 Microsoft Outlook Remote Code Execution Vulnerability	HIGH 8.8	—		2024-06-11
CVE-2024-30101 HIGH 7.5 2024-06-11 Microsoft Office Remote Code Execution Vulnerability	HIGH 7.5	—		2024-06-11
CVE-2024-27857 HIGH 7.8 iOS macOS 2024-06-10 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visio…	HIGH 7.8	—	iOS macOS	2024-06-10
CVE-2024-27855 HIGH 8.8 iOS macOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, macOS Ventura 1…	HIGH 8.8	—	iOS macOS	2024-06-10
CVE-2024-27851 HIGH 8.8 iOS macOS 2024-06-10 The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, …	HIGH 8.8	—	iOS macOS	2024-06-10
CVE-2024-27848 HIGH 7.8 iOS macOS 2024-06-10 This issue was addressed with improved permissions checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. A malicious app may be able to…	HIGH 7.8	—	iOS macOS	2024-06-10
CVE-2024-27836 HIGH 7.8 iOS macOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. Processing a maliciously crafte…	HIGH 7.8	—	iOS macOS	2024-06-10
CVE-2024-27832 HIGH 7.8 iOS macOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app…	HIGH 7.8	—	iOS macOS	2024-06-10
CVE-2024-27831 HIGH 7.8 iOS macOS 2024-06-10 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS…	HIGH 7.8	—	iOS macOS	2024-06-10
CVE-2024-27820 HIGH 8.8 iOS macOS 2024-06-10 The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma…	HIGH 8.8	—	iOS macOS	2024-06-10
CVE-2024-27817 HIGH 7.8 iOS macOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonom…	HIGH 7.8	—	iOS macOS	2024-06-10
CVE-2024-27815 HIGH 7.8 iOS macOS 2024-06-10 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visio…	HIGH 7.8	—	iOS macOS	2024-06-10
CVE-2024-27811 HIGH 7.8 iOS macOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app…	HIGH 7.8	—	iOS macOS	2024-06-10
CVE-2024-27808 HIGH 8.8 iOS macOS 2024-06-10 The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2…	HIGH 8.8	—	iOS macOS	2024-06-10
CVE-2024-27802 HIGH 7.8 iOS macOS 2024-06-10 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monter…	HIGH 7.8	—	iOS macOS	2024-06-10
CVE-2024-27801 HIGH 7.8 iOS macOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app…	HIGH 7.8	—	iOS macOS	2024-06-10
CVE-2024-23299 HIGH 8.6 macOS 2024-06-10 The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to brea…	HIGH 8.6	—	macOS	2024-06-10
CVE-2024-5499 HIGH 8.8 2024-05-30 Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted …	HIGH 8.8	—		2024-05-30
CVE-2024-5498 HIGH 8.8 2024-05-30 Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…	HIGH 8.8	—		2024-05-30
CVE-2024-5497 HIGH 8.8 2024-05-30 Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gest…	HIGH 8.8	—		2024-05-30
CVE-2024-5496 HIGH 8.8 2024-05-30 Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM…	HIGH 8.8	—		2024-05-30
CVE-2024-5495 HIGH 8.8 2024-05-30 Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…	HIGH 8.8	—		2024-05-30
CVE-2024-5494 HIGH 8.8 2024-05-30 Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…	HIGH 8.8	—		2024-05-30
CVE-2024-5493 HIGH 8.8 2024-05-30 Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…	HIGH 8.8	—		2024-05-30
CVE-2024-5160 HIGH 8.8 2024-05-22 Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page…	HIGH 8.8	—		2024-05-22
CVE-2024-5159 HIGH 8.8 2024-05-22 Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page…	HIGH 8.8	—		2024-05-22
CVE-2024-5158 HIGH 8.1 2024-05-22 Type Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to potentially perform arbitrary read/write via a crafted HTML page. (Ch…	HIGH 8.1	—		2024-05-22
CVE-2024-5157 HIGH 8.8 2024-05-22 Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pa…	HIGH 8.8	—		2024-05-22
CVE-2024-30042 HIGH 7.8 2024-05-14 Microsoft Excel Remote Code Execution Vulnerability	HIGH 7.8	—		2024-05-14
CVE-2024-4761 HIGH 8.8 KEV 2024-05-14 Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. …	HIGH 8.8	KEV		2024-05-14
CVE-2024-27843 HIGH 7.8 macOS 2024-05-14 A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to …	HIGH 7.8	—	macOS	2024-05-14
CVE-2024-27842 HIGH 7.8 macOS 2024-05-14 The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to execute arbitrary code with kernel privileges.	HIGH 7.8	—	macOS	2024-05-14
CVE-2024-27829 HIGH 7.8 macOS 2024-05-14 The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5. Processing a file may lead to unexpected app termination or ar…	HIGH 7.8	—	macOS	2024-05-14
CVE-2024-27825 HIGH 7.1 macOS 2024-05-14 A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. An app…	HIGH 7.1	—	macOS	2024-05-14
CVE-2024-27824 HIGH 7.8 macOS 2024-05-14 This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be …	HIGH 7.8	—	macOS	2024-05-14
CVE-2024-27822 HIGH 7.8 macOS 2024-05-14 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to gain root privileges.	HIGH 7.8	—	macOS	2024-05-14
CVE-2024-27818 HIGH 7.8 iOS macOS 2024-05-14 The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An att…	HIGH 7.8	—	iOS macOS	2024-05-14
CVE-2024-27813 HIGH 8.6 macOS 2024-05-14 The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to execute arbitrary code out of its sandbox or with…	HIGH 8.6	—	macOS	2024-05-14
CVE-2024-27798 HIGH 7.8 macOS 2024-05-14 An authorization issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An …	HIGH 7.8	—	macOS	2024-05-14
CVE-2024-27796 HIGH 7.8 iOS macOS 2024-05-14 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonom…	HIGH 7.8	—	iOS macOS	2024-05-14
CVE-2024-4368 HIGH 8.8 2024-05-01 Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…	HIGH 8.8	—		2024-05-01
CVE-2024-4331 HIGH 8.8 2024-05-01 Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…	HIGH 8.8	—		2024-05-01
CVE-2024-4058 HIGH 8.8 2024-05-01 Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…	HIGH 8.8	—		2024-05-01
CVE-2024-27791 HIGH 7.1 iOS macOS 2024-04-24 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonom…	HIGH 7.1	—	iOS macOS	2024-04-24
CVE-2024-3840 HIGH 7.5 2024-04-17 Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation restrictions via a cra…	HIGH 7.5	—		2024-04-17
CVE-2024-3837 HIGH 8.8 2024-04-17 Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c…	HIGH 8.8	—		2024-04-17
CVE-2024-3834 HIGH 8.8 2024-04-17 Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…	HIGH 8.8	—		2024-04-17
CVE-2024-3833 HIGH 8.8 2024-04-17 Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML …	HIGH 8.8	—		2024-04-17

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM