Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,849 CVEs affect a tracked app or OS (all severities, Windows). 305 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,849
Actively exploited
305
Publication window
2004-07-27 → 2026-11-11
All CVEs 18,849 CISA KEV 305 Public exploit 428 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,849 entries Windows Hide N/A Clear all
CVE
CVE-2023-6207
HIGH 8.8
Mozilla Thunderbird Mozilla Firefox

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
CVE-2023-6206
MEDIUM · vendor
Mozilla Thunderbird Mozilla Firefox

The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact t…
CVE-2023-6205
MEDIUM · vendor
Mozilla Thunderbird Mozilla Firefox

It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability…
CVE-2023-6204
MEDIUM · vendor
Mozilla Thunderbird Mozilla Firefox

On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on t…
CVE-2023-6112
HIGH 8.8
Chrome Google Chrome

Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…
CVE-2023-5997
HIGH 8.8
Chrome Google Chrome

Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…
CVE-2023-36041
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-36037
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Security Feature Bypass Vulnerability
CVE-2023-36719
HIGH · vendor
Windows

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
CVE-2023-36705
HIGH · vendor
Windows

Windows Installer Elevation of Privilege Vulnerability
CVE-2023-36428
HIGH · vendor
Windows

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
CVE-2023-36427
HIGH · vendor
Windows

Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2023-36425
HIGH · vendor
Windows

Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVE-2023-36424
HIGH · vendor KEV
Windows

Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36423
HIGH · vendor
Windows

Microsoft Remote Registry Service Remote Code Execution Vulnerability
CVE-2023-36408
HIGH · vendor
Windows

Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2023-36407
HIGH · vendor
Windows

Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2023-36406
HIGH · vendor
Windows

Windows Hyper-V Information Disclosure Vulnerability
CVE-2023-36405
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-36404
HIGH · vendor
Windows

Windows Kernel Information Disclosure Vulnerability
CVE-2023-36403
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-36402
HIGH · vendor
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-36401
HIGH · vendor
Windows

Microsoft Remote Registry Service Remote Code Execution Vulnerability
CVE-2023-36400
CRITICAL · vendor
Windows

Windows HMAC Key Derivation Elevation of Privilege Vulnerability
CVE-2023-36399
HIGH · vendor
Windows

Windows Storage Elevation of Privilege Vulnerability
CVE-2023-36398
HIGH · vendor
Windows

Windows NTFS Information Disclosure Vulnerability
CVE-2023-36397
CRITICAL · vendor
Windows

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-36396
HIGH · vendor
Windows

Windows Compressed Folder Remote Code Execution Vulnerability
CVE-2023-36395
HIGH · vendor
Windows

Windows Deployment Services Denial of Service Vulnerability
CVE-2023-36394
HIGH · vendor
Windows

Windows Search Service Elevation of Privilege Vulnerability
CVE-2023-36393
HIGH · vendor
Windows

Windows User Interface Application Core Remote Code Execution Vulnerability
CVE-2023-36392
HIGH · vendor
Windows

DHCP Server Service Denial of Service Vulnerability
CVE-2023-36047
HIGH · vendor
Windows

Windows Authentication Elevation of Privilege Vulnerability
CVE-2023-36046
HIGH · vendor
Windows

Windows Authentication Denial of Service Vulnerability
CVE-2023-36036
HIGH · vendor KEV
Windows

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36033
HIGH · vendor KEV
Windows

Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2023-36028
HIGH · vendor
Windows

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-36025
HIGH · vendor KEV
Windows

Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-36017
HIGH · vendor
Windows

Windows Scripting Engine Memory Corruption Vulnerability
CVE-2023-5996
HIGH 8.8
Chrome Google Chrome

Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…
CVE-2023-31102
HIGH 7.8
7-Zip

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.
CVE-2023-5859
MEDIUM 4.3
Chrome Google Chrome

Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted local H…
CVE-2023-5858
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML …
CVE-2023-5857
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malici…
CVE-2023-5856
HIGH 8.8
Chrome Google Chrome

Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten…
CVE-2023-5855
HIGH 8.8
Chrome Google Chrome

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to pot…
CVE-2023-5854
HIGH 8.8
Chrome Google Chrome

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti…
CVE-2023-5853
MEDIUM 4.3
Chrome Google Chrome

Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromi…
CVE-2023-5852
HIGH 8.8
Chrome Google Chrome

Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti…
CVE-2023-5851
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. …

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM