Vulnerabilities

Tracked app vulnerabilities

409 CVEs affect a tracked app or OS (High, iOS). 15 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 409
Actively exploited: 15
Publication window: 2018-04-19 → 2026-11-09

All CVEs 409 CISA KEV 15 Public exploit 2 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

409 entries High iOS Clear all

CVE	Severity	KEV	Apps	Published
CVE-2021-21205 HIGH 8.1 Google Chrome 2021-04-26 Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictions via a c…	HIGH 8.1	—	Google Chrome	2021-04-26
CVE-2020-1894 HIGH 8.8 2020-09-03 A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and W…	HIGH 8.8	—		2020-09-03
CVE-2020-15502 HIGH 7.5 2020-07-02 The DuckDuckGo application through 5.58.0 for Android, and through 7.47.1.0 for iOS, sends hostnames of visited web sites within HTTPS .ico requests to servers…	HIGH 7.5	—		2020-07-02
CVE-2019-18426 HIGH 8.2 KEV WhatsApp 2020-01-21 A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and l…	HIGH 8.2	KEV	WhatsApp	2020-01-21
CVE-2019-11931 HIGH 7.8 2019-11-14 A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user. The issue was present in parsing the e…	HIGH 7.8	—		2019-11-14
CVE-2019-11927 HIGH 7.8 2019-09-27 An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags …	HIGH 7.8	—		2019-09-27
CVE-2019-5598 HIGH 7.5 iOS 2019-05-15 In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in …	HIGH 7.5	—	iOS	2019-05-15
CVE-2019-10044 HIGH 8.8 2019-03-25 Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying …	HIGH 8.8	—		2019-03-25
CVE-2018-1167 HIGH 8.8 2018-04-19 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Spotify Music Player 1.0.69.336. User interaction is requir…	HIGH 8.8	—		2018-04-19

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM