Vulnerabilities
Tracked app vulnerabilities
18,849 CVEs affect a tracked app or OS (all severities, Windows). 305 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,849
- Actively exploited
- 305
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-49117
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-49116
CRITICAL · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49115
CRITICAL · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49111
HIGH · vendor
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
|
CVE-2024-49110
HIGH · vendor
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49109
HIGH · vendor
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
|
CVE-2024-49108
CRITICAL · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49107
HIGH · vendor
WmsRepair Service Elevation of Privilege Vulnerability |
|
CVE-2024-49106
CRITICAL · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2024-49105
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2024-49104
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-49103
HIGH · vendor
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
|
CVE-2024-49102
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-49101
HIGH · vendor
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
|
CVE-2024-49099
HIGH · vendor
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
|
CVE-2024-49098
HIGH · vendor
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
|
CVE-2024-49097
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2024-49096
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2024-49095
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2024-49094
HIGH · vendor
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
|
CVE-2024-49093
HIGH · vendor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2024-49092
HIGH · vendor
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49091
HIGH · vendor
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2024-49090
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49089
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-49088
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49087
HIGH · vendor
Windows Mobile Broadband Driver Information Disclosure Vulnerability |
|
CVE-2024-49086
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-49085
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-49084
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-49083
HIGH · vendor
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49082
HIGH · vendor
Windows File Explorer Information Disclosure Vulnerability |
|
CVE-2024-49081
HIGH · vendor
Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
|
CVE-2024-49080
HIGH · vendor
Windows IP Routing Management Snapin Remote Code Execution Vulnerability |
|
CVE-2024-49079
HIGH · vendor
Input Method Editor (IME) Remote Code Execution Vulnerability |
|
CVE-2024-49078
HIGH · vendor
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49077
HIGH · vendor
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49076
HIGH · vendor
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
|
CVE-2024-49075
HIGH · vendor
Windows Remote Desktop Services Denial of Service Vulnerability |
|
CVE-2024-49074
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49073
HIGH · vendor
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2024-49072
HIGH · vendor
Windows Task Scheduler Elevation of Privilege Vulnerability |
|
CVE-2024-12053
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chro… |
|
CVE-2024-9369
CRITICAL 9.6
Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an o… |
|
CVE-2024-7025
HIGH 8.8
Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
|
CVE-2024-11708
MEDIUM 6.5
Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox < 133 an… |
|
CVE-2024-11706
MEDIUM 6.5
A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed o… |
|
CVE-2024-11705
CRITICAL 9.1
`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading … |
|
CVE-2024-11704
CRITICAL 9.8
A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the same symmetric key c… |
|
CVE-2024-11702
HIGH 7.5
Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.