Vulnerabilities
Tracked app vulnerabilities
6,362 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 6,362
- Actively exploited
- 33
- Publication window
- 2009-07-30 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-40852
MEDIUM 5.3
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18 and iPadOS 18. An attacker may be able to see recent … |
|
CVE-2024-40850
A file access issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macO… |
|
CVE-2024-40847
MEDIUM 5.5
The issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may b… |
|
CVE-2024-40846
MEDIUM 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. Processing a maliciously crafted video file … |
|
CVE-2024-40845
MEDIUM 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. Processing a maliciously crafted video file … |
|
CVE-2024-40844
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, macOS Sonoma 14.7, … |
|
CVE-2024-40843
MEDIUM 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to modify protected parts of the file system. |
|
CVE-2024-40842
MEDIUM 5.5
An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive … |
|
CVE-2024-40841
MEDIUM 5.5
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. Processing a maliciously … |
|
CVE-2024-40840
MEDIUM 4.6
This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to use Si… |
|
CVE-2024-40837
MEDIUM 5.5
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data. |
|
CVE-2024-40831
MEDIUM 5.5
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library. |
|
CVE-2024-40826
A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An unencrypted document may be wr… |
|
CVE-2024-40825
MEDIUM 4.4
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, visionOS 2. A malicious app with root privileges may be able to modify t… |
|
CVE-2024-40801
MEDIUM 5.5
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protec… |
|
CVE-2024-40797
MEDIUM 6.1
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Visiting a maliciou… |
|
CVE-2024-27880
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia … |
|
CVE-2024-27876
A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.… |
|
CVE-2024-27875
MEDIUM 5.5
A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15. Privacy Indicators for microphone or camera access may be … |
|
CVE-2024-27869
The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to record the screen without an… |
|
CVE-2024-27861
MEDIUM 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory. |
|
CVE-2024-27860
MEDIUM 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory. |
|
CVE-2024-27858
MEDIUM 5.5
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data. |
|
CVE-2024-23237
MEDIUM 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An app may be able to cause a denial-of-service. |
|
CVE-2024-38222
MEDIUM 6.5
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
|
CVE-2024-43487
MEDIUM 6.5
Windows Mark of the Web Security Feature Bypass Vulnerability |
|
CVE-2024-43482
MEDIUM 6.5
Microsoft Outlook for iOS Information Disclosure Vulnerability |
|
CVE-2024-38258
MEDIUM 6.5
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability |
|
CVE-2024-38256
MEDIUM 5.5
Windows Kernel-Mode Driver Information Disclosure Vulnerability |
|
CVE-2024-38254
MEDIUM 5.5
Windows Authentication Information Disclosure Vulnerability |
|
CVE-2024-38235
MEDIUM 6.5
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-38234
MEDIUM 6.5
Windows Networking Denial of Service Vulnerability |
|
CVE-2024-38231
MEDIUM 6.5
Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
|
CVE-2024-38230
MEDIUM 6.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2024-38217
Windows Mark of the Web Security Feature Bypass Vulnerability |
|
CVE-2024-8394
MEDIUM 6.5
When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vuln… |
|
CVE-2024-45306
Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cur… |
|
CVE-2024-8035
MEDIUM 4.3
Inappropriate implementation in Extensions in Google Chrome on Windows prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HT… |
|
CVE-2024-8034
MEDIUM 4.3
Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted H… |
|
CVE-2024-8033
MEDIUM 4.3
Inappropriate implementation in WebApp Installs in Google Chrome on Windows prior to 128.0.6613.84 allowed an attacker who convinced a user to install a malici… |
|
CVE-2024-7981
MEDIUM 4.3
Inappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromi… |
|
CVE-2024-7978
MEDIUM 4.3
Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific U… |
|
CVE-2024-7976
MEDIUM 4.3
Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromi… |
|
CVE-2024-7975
MEDIUM 4.3
Inappropriate implementation in Permissions in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (… |
|
CVE-2024-38197
MEDIUM 6.5
Microsoft Teams for iOS Spoofing Vulnerability |
|
CVE-2024-38173
MEDIUM 6.7
Microsoft Outlook Remote Code Execution Vulnerability |
|
CVE-2024-38213
Windows Mark of the Web Security Feature Bypass Vulnerability |
|
CVE-2024-38200
MEDIUM 6.5
Microsoft Office Spoofing Vulnerability |
|
CVE-2024-42218
MEDIUM 4.7
1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms. |
|
CVE-2024-7005
MEDIUM 4.3
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.