Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
27,728
Actively exploited
377
Publication window
2004-07-27 → 2026-11-11
All CVEs 27,728 CISA KEV 377 Public exploit 503 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all
CVE
CVE-2024-30000
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-29999
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-29998
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-29997
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-29996
HIGH · vendor
Windows

Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-29994
HIGH · vendor
Windows

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
CVE-2024-26238
HIGH · vendor
Windows

Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability
CVE-2024-4559
MEDIUM 6.5
Chrome Google Chrome

Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…
CVE-2024-4558
CRITICAL 9.6
Chrome Google Chrome Safari
iOS macOS

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…
CVE-2023-40481
HIGH 7.8
7-Zip

7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af…
CVE-2023-40477
HIGH 7.8
WinRAR

RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2024-4368
HIGH 8.8
Chrome Google Chrome

Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…
CVE-2024-4331
HIGH 8.8
Chrome Google Chrome

Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…
CVE-2024-4060
MEDIUM 6.5
Chrome Google Chrome

Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…
CVE-2024-4059
MEDIUM 6.5
Chrome Google Chrome

Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. (Chromium secur…
CVE-2024-4058
HIGH 8.8
Chrome Google Chrome

Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…
CVE-2024-23709
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-23708
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-23707
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-23706
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-23705
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-23354
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-23351
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-21480
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-21477
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-21475
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-21471
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-20057
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-20056
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-1395
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-1067
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-0043
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-0025
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-0024
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-6363
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-43531
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-43530
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-43529
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33119
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-32873
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-32871
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-33899
HIGH 7.1
WinRAR

RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.
CVE-2022-48611
HIGH 7.8
iTunes

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges.
CVE-2024-26926
HIGH 7.8
Android

In the Linux kernel, the following vulnerability has been resolved: binder: check offset alignment in binder_get_object() Commit 6d98eb95b450 ("binder: avoid…
CVE-2024-26923
HIGH 7.8
Android

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take i…
CVE-2024-27791
HIGH 7.1
iOS macOS

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonom…
CVE-2024-23271
MEDIUM 6.5
iOS macOS

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A m…
CVE-2024-23228
LOW 3.3
iOS

This issue was addressed through improved state management. This issue is fixed in iOS 17.3 and iPadOS 17.3. Locked Notes content may have been unexpectedly un…
CVE-2024-3914
MEDIUM 6.5
Chrome Google Chrome

Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…
CVE-2024-3847
MEDIUM 6.1
Chrome Google Chrome

Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM