Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

2,721 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
2,721
Actively exploited
48
Publication window
2007-08-28 → 2026-11-10
All CVEs 2,721 CISA KEV 48 Public exploit 56 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

2,721 entries Critical Hide N/A Clear all
CVE
CVE-2024-38077
CRITICAL · vendor
Windows

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2024-38076
CRITICAL · vendor
Windows

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2024-38074
CRITICAL · vendor
Windows

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVE-2024-38060
CRITICAL · vendor
Windows

Windows Imaging Component Remote Code Execution Vulnerability
CVE-2020-8597
CRITICAL · vendor
Android

Microsoft Security Update Guide entry — NVD enrichira.
CVE-2024-38476
CRITICAL 9.8
macOS

Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend application…
CVE-2024-31320
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-21461
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-30080
CRITICAL 9.8
Windows

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-43556
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-43551
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-43538
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-5274
CRITICAL 9.6 KEV
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch…
CVE-2024-4947
CRITICAL 9.6 KEV
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chr…
CVE-2024-4671
CRITICAL 9.6 KEV
Chrome Google Chrome

Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a …
CVE-2024-27280
CRITICAL 9.8
macOS

A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods …
CVE-2024-4558
CRITICAL 9.6
Chrome Google Chrome Safari
iOS macOS

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…
CVE-2024-23706
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-3863
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating syst…
CVE-2024-3157
CRITICAL 9.6
Chrome Google Chrome

Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentiall…
CVE-2023-28582
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-21408
CRITICAL · vendor
Windows

Windows Hyper-V Denial of Service Vulnerability
CVE-2024-21407
CRITICAL · vendor
Windows

Windows Hyper-V Remote Code Execution Vulnerability
CVE-2024-23717
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-0039
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-28578
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-21413
CRITICAL 9.8 KEV
Microsoft Office Office

Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-1284
CRITICAL 9.8
Chrome Google Chrome

Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…
CVE-2024-1283
CRITICAL 9.8
Chrome Google Chrome

Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…
CVE-2023-5841
CRITICAL 9.1
iOS macOS

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing…
CVE-2024-0031
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-0808
CRITICAL 9.8
Chrome Google Chrome

Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chro…
CVE-2024-20700
CRITICAL · vendor
Windows

Windows Hyper-V Remote Code Execution Vulnerability
CVE-2024-20674
CRITICAL · vendor
Windows

Windows Kerberos Security Feature Bypass Vulnerability
CVE-2023-50643
CRITICAL 9.8
Evernote

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments compon…
CVE-2023-33036
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33025
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21651
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-35641
CRITICAL · vendor
Windows

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2023-35630
CRITICAL · vendor
Windows

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2023-35628
CRITICAL · vendor
Windows

Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2023-40088
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40077
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40076
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2022-40507
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-6345
CRITICAL 9.6 KEV
Chrome Google Chrome

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a s…
CVE-2023-36400
CRITICAL · vendor
Windows

Windows HMAC Key Derivation Elevation of Privilege Vulnerability
CVE-2023-36397
CRITICAL · vendor
Windows

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-40113
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33045
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM