Vulnerabilities

Tracked app vulnerabilities

3,840 CVEs affect a tracked app or OS (Medium, macOS). 9 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 3,840
Actively exploited: 9
Publication window: 2009-08-11 → 2026-11-10

All CVEs 3,840 CISA KEV 9 Public exploit 11 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

3,840 entries Medium macOS Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-23267 MEDIUM 5.5 macOS 2024-03-08 The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to bypa…	MEDIUM 5.5	—	macOS	2024-03-08
CVE-2024-23266 MEDIUM 5.5 macOS 2024-03-08 The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to modi…	MEDIUM 5.5	—	macOS	2024-03-08
CVE-2024-23264 MEDIUM 5.5 macOS iOS 2024-03-08 A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Montere…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23263 MEDIUM 6.5 macOS iOS 2024-03-08 A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma …	MEDIUM 6.5	—	macOS iOS	2024-03-08
CVE-2024-23260 MEDIUM 5.5 macOS 2024-03-08 This issue was addressed by removing additional entitlements. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.	MEDIUM 5.5	—	macOS	2024-03-08
CVE-2024-23259 MEDIUM 6.5 macOS iOS 2024-03-08 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Processing web …	MEDIUM 6.5	—	macOS iOS	2024-03-08
CVE-2024-23254 MEDIUM 6.5 macOS iOS 2024-03-08 The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, wa…	MEDIUM 6.5	—	macOS iOS	2024-03-08
CVE-2024-23250 MEDIUM 5.5 macOS iOS 2024-03-08 An access issue was addressed with improved access restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23241 MEDIUM 5.5 macOS iOS 2024-03-08 This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4. An app may be able t…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23239 MEDIUM 4.7 macOS iOS 2024-03-08 A race condition was addressed with improved state handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An ap…	MEDIUM 4.7	—	macOS iOS	2024-03-08
CVE-2024-23235 MEDIUM 4.7 macOS iOS 2024-03-08 A race condition was addressed with additional validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tv…	MEDIUM 4.7	—	macOS iOS	2024-03-08
CVE-2024-23234 MEDIUM 6.7 macOS 2024-03-08 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.…	MEDIUM 6.7	—	macOS	2024-03-08
CVE-2024-23231 MEDIUM 5.5 macOS iOS 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23230 MEDIUM 5.5 macOS 2024-03-08 This issue was addressed with improved file handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able…	MEDIUM 5.5	—	macOS	2024-03-08
CVE-2024-23205 MEDIUM 5.5 macOS iOS 2024-03-08 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app …	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2024-23201 MEDIUM 5.5 macOS iOS 2024-03-08 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macO…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2023-28826 MEDIUM 5.5 macOS iOS 2024-03-08 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS So…	MEDIUM 5.5	—	macOS iOS	2024-03-08
CVE-2023-42853 MEDIUM 5.5 macOS 2024-02-21 A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to …	MEDIUM 5.5	—	macOS	2024-02-21
CVE-2024-1676 MEDIUM 5.4 2024-02-21 Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chr…	MEDIUM 5.4	—		2024-02-21
CVE-2024-1672 MEDIUM 5.4 2024-02-21 Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via…	MEDIUM 5.4	—		2024-02-21
CVE-2024-1671 MEDIUM 6.5 2024-02-21 Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafte…	MEDIUM 6.5	—		2024-02-21
CVE-2024-24699 MEDIUM 6.5 2024-02-14 Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.	MEDIUM 6.5	—		2024-02-14
CVE-2024-24698 MEDIUM 4.9 2024-02-14 Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.	MEDIUM 4.9	—		2024-02-14
CVE-2024-24690 MEDIUM 5.4 2024-02-14 Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.	MEDIUM 5.4	—		2024-02-14
CVE-2024-0814 MEDIUM 6.5 2024-01-24 Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (…	MEDIUM 6.5	—		2024-01-24
CVE-2024-0811 MEDIUM 4.3 2024-01-24 Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extensio…	MEDIUM 4.3	—		2024-01-24
CVE-2024-0810 MEDIUM 4.3 2024-01-24 Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension t…	MEDIUM 4.3	—		2024-01-24
CVE-2024-0809 MEDIUM 4.3 2024-01-24 Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML p…	MEDIUM 4.3	—		2024-01-24
CVE-2024-0805 MEDIUM 4.3 2024-01-24 Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain nam…	MEDIUM 4.3	—		2024-01-24
CVE-2024-23224 MEDIUM 5.5 macOS 2024-01-23 The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.3, macOS Ventura 13.6.4. An app may be able to access sensitive user data.	MEDIUM 5.5	—	macOS	2024-01-23
CVE-2024-23223 MEDIUM 6.2 iOS macOS 2024-01-23 A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An …	MEDIUM 6.2	—	iOS macOS	2024-01-23
CVE-2024-23218 MEDIUM 5.9 macOS iOS 2024-01-23 A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions. This issue is fixed in iOS 16.7.6 and iPad…	MEDIUM 5.9	—	macOS iOS	2024-01-23
CVE-2024-23215 MEDIUM 5.5 iOS macOS 2024-01-23 An issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. …	MEDIUM 5.5	—	iOS macOS	2024-01-23
CVE-2024-23207 MEDIUM 5.5 iOS macOS 2024-01-23 This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma…	MEDIUM 5.5	—	iOS macOS	2024-01-23
CVE-2024-23206 MEDIUM 6.5 iOS macOS 2024-01-23 An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, ma…	MEDIUM 6.5	—	iOS macOS	2024-01-23
CVE-2023-42937 MEDIUM 5.5 iOS macOS 2024-01-23 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ve…	MEDIUM 5.5	—	iOS macOS	2024-01-23
CVE-2023-42935 MEDIUM 5.5 macOS 2024-01-23 An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6.4. A local attacker may be able to view the pre…	MEDIUM 5.5	—	macOS	2024-01-23
CVE-2023-42888 MEDIUM 5.5 iOS macOS 2024-01-23 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ventura 13.6.4, macOS Sonoma 14.2, macOS…	MEDIUM 5.5	—	iOS macOS	2024-01-23
CVE-2023-42887 MEDIUM 6.3 macOS 2024-01-23 An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.6.4, macOS Sonoma 14.2. An app may be able to read …	MEDIUM 6.3	—	macOS	2024-01-23
CVE-2023-40528 MEDIUM 5.5 macOS 2024-01-23 This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17, watchOS 10, macOS Sonoma 14, iOS 17 and iPadOS 17, macOS Ventura 13.6…	MEDIUM 5.5	—	macOS	2024-01-23
CVE-2024-0333 MEDIUM 5.3 2024-01-10 Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious…	MEDIUM 5.3	—		2024-01-10
CVE-2022-42816 MEDIUM 5.5 macOS 2024-01-10 A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file s…	MEDIUM 5.5	—	macOS	2024-01-10
CVE-2023-3742 MEDIUM 6.8 2023-12-20 Insufficient policy enforcement in ADB in Google Chrome on ChromeOS prior to 114.0.5735.90 allowed a local attacker to bypass device policy restrictions via ph…	MEDIUM 6.8	—		2023-12-20
CVE-2023-51385 MEDIUM 6.5 macOS 2023-12-18 In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansio…	MEDIUM 6.5	—	macOS	2023-12-18
CVE-2023-51384 MEDIUM 5.5 macOS 2023-12-18 In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of …	MEDIUM 5.5	—	macOS	2023-12-18
CVE-2023-48795 MEDIUM 5.9 macOS 2023-12-18 The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks …	MEDIUM 5.9	—	macOS	2023-12-18
CVE-2023-49646 MEDIUM 6.4 2023-12-13 Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.	MEDIUM 6.4	—		2023-12-13
CVE-2023-36009 MEDIUM 5.5 2023-12-12 Microsoft Word Information Disclosure Vulnerability	MEDIUM 5.5	—		2023-12-12
CVE-2023-35636 MEDIUM 6.5 2023-12-12 Microsoft Outlook Information Disclosure Vulnerability	MEDIUM 6.5	—		2023-12-12
CVE-2023-6512 MEDIUM 6.5 2023-12-06 Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially spoof the contents of an iframe…	MEDIUM 6.5	—		2023-12-06

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM