Vulnerabilities
Tracked app vulnerabilities
27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,728
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-27810
A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS … |
|
CVE-2024-27804
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.3, watchOS 10.… |
|
CVE-2024-27803
LOW 2.4
A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to sh… |
|
CVE-2024-27798
HIGH 7.8
An authorization issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An … |
|
CVE-2024-27796
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonom… |
|
CVE-2024-27793
HIGH 7.8
The issue was addressed with improved checks. This issue is fixed in iTunes 12.13.2 for Windows. Parsing a file may lead to an unexpected app termination or ar… |
|
CVE-2024-27789
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura … |
|
CVE-2024-27280
CRITICAL 9.8
A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods … |
|
CVE-2024-23236
MEDIUM 5.5
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to read arbitrary files. |
|
CVE-2024-23229
MEDIUM 5.5
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.… |
|
CVE-2024-30051
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2024-30050
MEDIUM · vendor
Windows Mark of the Web Security Feature Bypass Vulnerability |
|
CVE-2024-30049
HIGH · vendor
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2024-30040
Windows MSHTML Platform Security Feature Bypass Vulnerability |
|
CVE-2024-30039
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2024-30038
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-30037
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-30036
HIGH · vendor
Windows Deployment Services Information Disclosure Vulnerability |
|
CVE-2024-30035
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2024-30034
HIGH · vendor
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
|
CVE-2024-30033
HIGH · vendor
Windows Search Service Elevation of Privilege Vulnerability |
|
CVE-2024-30032
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2024-30031
HIGH · vendor
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
|
CVE-2024-30029
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30028
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-30027
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2024-30025
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-30024
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30023
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30022
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30021
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30020
HIGH · vendor
Windows Cryptographic Services Remote Code Execution Vulnerability |
|
CVE-2024-30019
HIGH · vendor
DHCP Server Service Denial of Service Vulnerability |
|
CVE-2024-30018
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-30017
HIGH · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-30016
HIGH · vendor
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2024-30015
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30014
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30012
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30011
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-30010
HIGH · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-30009
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30008
HIGH · vendor
Windows DWM Core Library Information Disclosure Vulnerability |
|
CVE-2024-30007
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2024-30006
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-30005
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30004
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30003
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30002
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30001
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.