Vulnerabilities

Tracked app vulnerabilities

16,453 CVEs affect a tracked app or OS (all severities, all platforms). 286 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 16,453
Actively exploited: 286
Publication window: 2002-10-04 → 2026-08-19

All CVEs 16,453 CISA KEV 286 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

16,453 entries

CVE	Severity	KEV	Apps	Published
CVE-2025-21179 HIGH 4.8 2025-02-11 DHCP Client Service Denial of Service Vulnerability	HIGH 4.8	—	—	2025-02-11
CVE-2025-24200 MEDIUM 6.1 KEV 2025-02-10 An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 1…	MEDIUM 6.1	KEV	—	2025-02-10
CVE-2024-54658 MEDIUM 6.5 2025-02-10 The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1…	MEDIUM 6.5	—	—	2025-02-10
CVE-2024-27859 HIGH 8.8 2025-02-10 The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.…	HIGH 8.8	—	—	2025-02-10
CVE-2025-21253 MEDIUM 5.3 2 apps 2025-02-06 Microsoft Edge for IOS and Android Spoofing Vulnerability	MEDIUM 5.3	—	2	2025-02-06
CVE-2025-1020 CRITICAL 9.8 1 app 2025-02-04 Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s…	CRITICAL 9.8	—	Mozilla Thunderbird	2025-02-04
CVE-2025-1019 MEDIUM 4.3 1 app 2025-02-04 The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. …	MEDIUM 4.3	—	Mozilla Thunderbird	2025-02-04
CVE-2025-1018 MEDIUM 5.3 1 app 2025-02-04 The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential sp…	MEDIUM 5.3	—	Mozilla Thunderbird	2025-02-04
CVE-2025-1017 CRITICAL 9.8 1 app 2025-02-04 Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption a…	CRITICAL 9.8	—	Mozilla Thunderbird	2025-02-04
CVE-2025-1016 CRITICAL 9.8 1 app 2025-02-04 Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bug…	CRITICAL 9.8	—	Mozilla Thunderbird	2025-02-04
CVE-2025-1015 MEDIUM 5.4 1 app 2025-02-04 The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malici…	MEDIUM 5.4	—	Mozilla Thunderbird	2025-02-04
CVE-2025-1014 HIGH 8.8 1 app 2025-02-04 Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. This vulnerability was fixed in Fir…	HIGH 8.8	—	Mozilla Thunderbird	2025-02-04
CVE-2025-1013 MEDIUM 6.5 1 app 2025-02-04 A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak. This vu…	MEDIUM 6.5	—	Mozilla Thunderbird	2025-02-04
CVE-2025-1012 HIGH 7.5 1 app 2025-02-04 A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7,…	HIGH 7.5	—	Mozilla Thunderbird	2025-02-04
CVE-2025-1011 HIGH 8.8 1 app 2025-02-04 A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vul…	HIGH 8.8	—	Mozilla Thunderbird	2025-02-04
CVE-2025-1010 HIGH 8.8 1 app 2025-02-04 An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefo…	HIGH 8.8	—	Mozilla Thunderbird	2025-02-04
CVE-2025-1009 CRITICAL 9.8 1 app 2025-02-04 An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, …	CRITICAL 9.8	—	Mozilla Thunderbird	2025-02-04
CVE-2025-0510 MEDIUM 6.5 1 app 2025-02-04 Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vu…	MEDIUM 6.5	—	Mozilla Thunderbird	2025-02-04
CVE-2025-20636 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-20635 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-20634 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-0100 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-0099 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-0098 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-0097 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-0096 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-0095 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-0094 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-0091 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-0088 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2025-0015 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-53104 HIGH KEV 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	KEV	—	2025-02-01
CVE-2024-52935 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-49843 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-49839 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-49834 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-49833 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-49832 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-49746 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-49743 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-49741 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-49729 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-49723 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-49721 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-47892 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-46973 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-45582 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-45571 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01
CVE-2024-45569 CRITICAL 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	2025-02-01
CVE-2024-43705 HIGH 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-02-01