Vulnerabilities
Tracked app vulnerabilities
27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,728
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-30087
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-30086
HIGH 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2024-30085
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2024-30084
HIGH 7.0
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-30083
HIGH 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2024-30082
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-30080
CRITICAL 9.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2024-30078
HIGH 8.8
Windows Wi-Fi Driver Remote Code Execution Vulnerability |
|
CVE-2024-30077
HIGH 8.0
Windows OLE Remote Code Execution Vulnerability |
|
CVE-2024-30076
MEDIUM 6.8
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2024-30072
HIGH 7.8
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability |
|
CVE-2024-30070
HIGH 7.5
DHCP Server Service Denial of Service Vulnerability |
|
CVE-2024-30069
MEDIUM 4.7
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2024-30068
HIGH 8.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-30067
MEDIUM 5.5
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2024-30066
MEDIUM 5.5
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2024-30065
MEDIUM 5.5
Windows Themes Denial of Service Vulnerability |
|
CVE-2024-30063
MEDIUM 6.7
Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
|
CVE-2024-30062
HIGH 7.8
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability |
|
CVE-2024-5702
HIGH · vendor
Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, an… |
|
CVE-2024-5700
HIGH 7.0
Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume t… |
|
CVE-2024-5696
HIGH 8.6
By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability… |
|
CVE-2024-5693
MEDIUM 6.1
Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. T… |
|
CVE-2024-5692
MEDIUM 6.5
On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.ur… |
|
CVE-2024-5691
MEDIUM 4.7
By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions… |
|
CVE-2024-5690
MEDIUM · vendor
By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulner… |
|
CVE-2024-5688
HIGH 8.1
If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 12… |
|
CVE-2024-30064
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-50868
HIGH · vendor
MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU |
|
CVE-2023-38546
LOW · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2024-27885
MEDIUM 6.3
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app ma… |
|
CVE-2024-27857
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visio… |
|
CVE-2024-27855
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, macOS Ventura 1… |
|
CVE-2024-27851
The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, … |
|
CVE-2024-27850
This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, v… |
|
CVE-2024-27848
This issue was addressed with improved permissions checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. A malicious app may be able to… |
|
CVE-2024-27845
LOW 3.3
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.5 and iPadOS 17.5. An app may be able to access Notes at… |
|
CVE-2024-27844
The issue was addressed with improved checks. This issue is fixed in Safari 17.5, macOS Sonoma 14.5, visionOS 1.2. A website's permission dialog may persist af… |
|
CVE-2024-27840
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, ma… |
|
CVE-2024-27838
The issue was addressed by adding additional logic. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14… |
|
CVE-2024-27836
The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. Processing a maliciously crafte… |
|
CVE-2024-27833
HIGH 8.8
An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, t… |
|
CVE-2024-27832
The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app… |
|
CVE-2024-27831
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS… |
|
CVE-2024-27830
This issue was addressed through improved state management. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionO… |
|
CVE-2024-27828
HIGH 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be ab… |
|
CVE-2024-27820
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma… |
|
CVE-2024-27819
LOW 2.4
The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access ma… |
|
CVE-2024-27817
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonom… |
|
CVE-2024-27815
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visio… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.