Vulnerabilities
Tracked app vulnerabilities
27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,728
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-20077
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-20076
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-0153
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-6293
HIGH 8.8
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2024-6292
HIGH 8.8
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2024-6291
HIGH 8.8
Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
|
CVE-2024-6290
HIGH 8.8
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2024-38093
MEDIUM 4.3
Microsoft Edge (Chromium-based) Spoofing Vulnerability |
|
CVE-2024-38082
MEDIUM 4.7
Microsoft Edge (Chromium-based) Spoofing Vulnerability |
|
CVE-2024-6103
HIGH 8.8
Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2024-6102
HIGH 8.8
Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
|
CVE-2024-6101
HIGH 8.8
Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML… |
|
CVE-2024-6100
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s… |
|
CVE-2024-36978
HIGH 7.8
In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned… |
|
CVE-2024-30057
MEDIUM 5.4
Microsoft Edge for iOS Spoofing Vulnerability |
|
CVE-2024-34130
MEDIUM 5.5
Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature … |
|
CVE-2024-34129
HIGH 7.5
Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… |
|
CVE-2024-5847
HIGH 8.8
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro… |
|
CVE-2024-5846
HIGH 8.8
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro… |
|
CVE-2024-5845
HIGH 8.8
Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chrom… |
|
CVE-2024-5844
HIGH 8.8
Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML … |
|
CVE-2024-5843
MEDIUM 6.5
Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chr… |
|
CVE-2024-5842
HIGH 8.8
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfor… |
|
CVE-2024-5841
HIGH 8.8
Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2024-5840
MEDIUM 6.5
Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromi… |
|
CVE-2024-5839
MEDIUM 6.5
Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a… |
|
CVE-2024-5838
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromiu… |
|
CVE-2024-5837
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pa… |
|
CVE-2024-5836
HIGH 8.8
Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to e… |
|
CVE-2024-5835
HIGH 8.8
Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to … |
|
CVE-2024-5834
HIGH 8.8
Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chro… |
|
CVE-2024-5833
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pa… |
|
CVE-2024-5832
HIGH 8.8
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
|
CVE-2024-5831
HIGH 8.8
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
|
CVE-2024-5830
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chrom… |
|
CVE-2024-35265
HIGH 7.0
Windows Perception Service Elevation of Privilege Vulnerability |
|
CVE-2024-35250
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-30104
HIGH 7.8
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2024-30103
HIGH 8.8
Microsoft Outlook Remote Code Execution Vulnerability |
|
CVE-2024-30101
HIGH 7.5
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2024-30099
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-30097
HIGH 8.8
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
|
CVE-2024-30096
MEDIUM 5.5
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2024-30095
HIGH 7.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30094
HIGH 7.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30093
HIGH 7.3
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2024-30091
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-30090
HIGH 7.0
Microsoft Streaming Service Elevation of Privilege Vulnerability |
|
CVE-2024-30089
HIGH 7.8
Microsoft Streaming Service Elevation of Privilege Vulnerability |
|
CVE-2024-30088
Windows Kernel Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.