Vulnerabilities
Tracked app vulnerabilities
27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,728
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-49033
HIGH 7.5
Microsoft Word Security Feature Bypass Vulnerability |
|
CVE-2024-49030
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49029
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49028
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49027
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49026
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49019
HIGH 7.8
Active Directory Certificate Services Elevation of Privilege Vulnerability |
|
CVE-2024-49046
HIGH · vendor
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2024-43646
HIGH · vendor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2024-43645
HIGH · vendor
Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability |
|
CVE-2024-43644
HIGH · vendor
Windows Client-Side Caching Elevation of Privilege Vulnerability |
|
CVE-2024-43643
HIGH · vendor
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43642
HIGH · vendor
Windows SMB Denial of Service Vulnerability |
|
CVE-2024-43641
HIGH · vendor
Windows Registry Elevation of Privilege Vulnerability |
|
CVE-2024-43640
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43639
CRITICAL · vendor
Windows KDC Proxy Remote Code Execution Vulnerability |
|
CVE-2024-43638
HIGH · vendor
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43637
HIGH · vendor
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43636
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-43635
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43634
HIGH · vendor
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43633
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-43631
HIGH · vendor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2024-43630
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-43629
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2024-43628
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43627
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43626
HIGH · vendor
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2024-43625
CRITICAL · vendor
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability |
|
CVE-2024-43624
HIGH · vendor
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability |
|
CVE-2024-43623
HIGH · vendor
Windows NT OS Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-43622
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43621
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43620
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43530
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2024-43452
HIGH · vendor
Windows Registry Elevation of Privilege Vulnerability |
|
CVE-2024-43451
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2024-43450
HIGH · vendor
Windows DNS Spoofing Vulnerability |
|
CVE-2024-43449
HIGH · vendor
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43447
HIGH · vendor
Windows SMBv3 Server Remote Code Execution Vulnerability |
|
CVE-2024-38264
HIGH · vendor
Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability |
|
CVE-2024-38203
HIGH · vendor
Windows Package Library Manager Information Disclosure Vulnerability |
|
CVE-2024-24795
MEDIUM · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2023-38709
HIGH · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2024-10827
HIGH 8.8
Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2024-10826
HIGH 8.8
Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a… |
|
CVE-2024-44234
The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS S… |
|
CVE-2024-44233
The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS S… |
|
CVE-2024-44232
The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS S… |
|
CVE-2024-46740
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.