Vulnerabilities
Tracked app vulnerabilities
18,849 CVEs affect a tracked app or OS (all severities, Windows). 305 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,849
- Actively exploited
- 305
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-21350
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-21349
HIGH 8.8
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability |
|
CVE-2024-21348
HIGH 7.5
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2024-21347
HIGH 7.5
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-21346
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-21344
MEDIUM 5.9
Windows Network Address Translation (NAT) Denial of Service Vulnerability |
|
CVE-2024-21343
MEDIUM 5.9
Windows Network Address Translation (NAT) Denial of Service Vulnerability |
|
CVE-2024-21341
MEDIUM 6.8
Windows Kernel Remote Code Execution Vulnerability |
|
CVE-2024-21340
MEDIUM 4.6
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2024-21339
MEDIUM 6.4
Windows USB Generic Parent Driver Remote Code Execution Vulnerability |
|
CVE-2024-21338
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-21304
MEDIUM 4.1
Trusted Compute Base Elevation of Privilege Vulnerability |
|
CVE-2024-20684
MEDIUM 6.5
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-20673
HIGH 7.8
+1
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2024-21353
HIGH · vendor
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-21345
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-21342
HIGH · vendor
Windows DNS Client Denial of Service Vulnerability |
|
CVE-2023-50387
HIGH · vendor
MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers |
|
CVE-2024-1284
CRITICAL 9.8
Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2024-1283
CRITICAL 9.8
Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
|
CVE-2024-1077
HIGH 8.8
Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chro… |
|
CVE-2024-1060
HIGH 8.8
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2024-1059
HIGH 8.8
Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML… |
|
CVE-2024-23743
LOW 3.3
Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must lau… |
|
CVE-2023-40547
HIGH 8.3
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allow… |
|
CVE-2024-0814
MEDIUM 6.5
Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (… |
|
CVE-2024-0813
HIGH 8.8
Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially… |
|
CVE-2024-0812
HIGH 8.8
Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a … |
|
CVE-2024-0811
MEDIUM 4.3
Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extensio… |
|
CVE-2024-0810
MEDIUM 4.3
Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension t… |
|
CVE-2024-0809
MEDIUM 4.3
Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML p… |
|
CVE-2024-0808
CRITICAL 9.8
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chro… |
|
CVE-2024-0807
HIGH 8.8
Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
|
CVE-2024-0806
HIGH 8.8
Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interactio… |
|
CVE-2024-0805
MEDIUM 4.3
Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain nam… |
|
CVE-2024-0804
HIGH 7.5
Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HT… |
|
CVE-2024-0755
HIGH · vendor
Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume tha… |
|
CVE-2024-0753
MEDIUM · vendor
In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunder… |
|
CVE-2024-0751
HIGH · vendor
A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 11… |
|
CVE-2024-0750
HIGH 8.8
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affect… |
|
CVE-2024-0749
MEDIUM 4.3
A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar. This vulnerability affects Firef… |
|
CVE-2024-0747
MEDIUM 6.5
When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child Content Security Policy… |
|
CVE-2024-0746
MEDIUM · vendor
A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunde… |
|
CVE-2024-0742
MEDIUM 4.3
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent … |
|
CVE-2024-0741
MEDIUM · vendor
An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox… |
|
CVE-2024-0519
HIGH 8.8
KEV
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2024-0518
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2024-0517
HIGH 8.8
Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
|
CVE-2024-0333
MEDIUM 5.3
Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious… |
|
CVE-2024-21320
HIGH · vendor
Windows Themes Spoofing Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.