Vulnerabilities

Tracked app vulnerabilities

16,430 CVEs affect a tracked app or OS (all severities, all platforms). 286 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 16,430
Actively exploited: 286
Publication window: 2002-10-04 → 2026-08-19

All CVEs 16,430 CISA KEV 286 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

16,430 entries

CVE	Severity	KEV	Apps	Published
CVE-2025-0239 MEDIUM 4.0 1 app 2025-01-07 When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability was fixed in Fi…	MEDIUM 4.0	—	Mozilla Thunderbird	2025-01-07
CVE-2025-0238 MEDIUM 5.3 1 app 2025-01-07 Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability …	MEDIUM 5.3	—	Mozilla Thunderbird	2025-01-07
CVE-2025-0237 MEDIUM 5.4 1 app 2025-01-07 The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal bein…	MEDIUM 5.4	—	Mozilla Thunderbird	2025-01-07
CVE-2024-49749 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-49748 CRITICAL 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	2025-01-01
CVE-2024-49747 CRITICAL 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	2025-01-01
CVE-2024-49745 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-49744 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-49742 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-49738 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-49737 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-49736 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-49735 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-49734 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-49733 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-49732 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-49724 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-45558 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-45553 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-43771 CRITICAL 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	2025-01-01
CVE-2024-43770 CRITICAL 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	2025-01-01
CVE-2024-43765 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-43763 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-43704 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-43096 CRITICAL 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	2025-01-01
CVE-2024-43095 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-34730 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-34722 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-21464 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-20154 CRITICAL 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	2025-01-01
CVE-2024-20148 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-20146 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-20145 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-20144 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-20143 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-20140 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-20105 HIGH 2025-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2025-01-01
CVE-2024-44298 LOW 3.3 2024-12-20 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access inf…	LOW 3.3	—	—	2024-12-20
CVE-2024-44293 MEDIUM 5.5 2024-12-20 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. A user may be able to view sensi…	MEDIUM 5.5	—	—	2024-12-20
CVE-2024-44292 MEDIUM 5.5 2024-12-20 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sen…	MEDIUM 5.5	—	—	2024-12-20
CVE-2024-44231 MEDIUM 4.6 2024-12-20 This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. A person with physical access to a Mac may be able to by…	MEDIUM 4.6	—	—	2024-12-20
CVE-2024-44223 MEDIUM 4.6 2024-12-20 This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with physical access to a Mac may be able to…	MEDIUM 4.6	—	—	2024-12-20
CVE-2024-44211 MEDIUM 5.5 2024-12-20 This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data.	MEDIUM 5.5	—	—	2024-12-20
CVE-2024-44195 HIGH 7.5 2024-12-20 A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to read arbitrary files.	HIGH 7.5	—	—	2024-12-20
CVE-2024-54538 HIGH 7.5 2024-12-20 A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Se…	HIGH 7.5	—	—	2024-12-20
CVE-2024-54534 CRITICAL 9.8 2024-12-12 The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18…	CRITICAL 9.8	—	—	2024-12-12
CVE-2024-54531 MEDIUM 5.5 2024-12-12 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. An app may be able to bypass kASLR.	MEDIUM 5.5	—	—	2024-12-12
CVE-2024-54529 HIGH 7.8 2024-12-12 A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to e…	HIGH 7.8	—	—	2024-12-12
CVE-2024-54528 HIGH 7.1 2024-12-12 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be abl…	HIGH 7.1	—	—	2024-12-12
CVE-2024-54527 MEDIUM 5.5 2024-12-12 This issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, …	MEDIUM 5.5	—	—	2024-12-12