Vulnerabilities
Tracked app vulnerabilities
27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,728
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-3846
MEDIUM 4.3
Inappropriate implementation in Prompts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gesture… |
|
CVE-2024-3845
MEDIUM 4.3
Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML pa… |
|
CVE-2024-3844
MEDIUM 4.3
Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted Chrome Extens… |
|
CVE-2024-3843
MEDIUM 4.3
Insufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Ch… |
|
CVE-2024-3841
MEDIUM 6.1
Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged … |
|
CVE-2024-3840
HIGH 7.5
Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation restrictions via a cra… |
|
CVE-2024-3839
MEDIUM 6.5
Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sensitive information from process memory v… |
|
CVE-2024-3838
MEDIUM 5.5
Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform… |
|
CVE-2024-3837
HIGH 8.8
Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c… |
|
CVE-2024-3834
HIGH 8.8
Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
|
CVE-2024-3833
HIGH 8.8
Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML … |
|
CVE-2024-3832
HIGH 8.8
Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Ch… |
|
CVE-2024-3864
HIGH · vendor
Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enou… |
|
CVE-2024-3863
CRITICAL 9.8
The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating syst… |
|
CVE-2024-3861
MEDIUM · vendor
If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free. This vulnerability… |
|
CVE-2024-3860
MEDIUM 6.2
An out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it would crash. This vul… |
|
CVE-2024-3859
MEDIUM · vendor
On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This vulner… |
|
CVE-2024-3857
HIGH 7.8
The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerability affec… |
|
CVE-2024-3854
HIGH 8.8
In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox < 125, Fi… |
|
CVE-2024-3852
HIGH 7.5
GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, a… |
|
CVE-2024-3302
LOW · vendor
There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the b… |
|
CVE-2024-3516
MEDIUM 6.5
Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
|
CVE-2024-3515
MEDIUM 6.5
Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2024-3157
CRITICAL 9.6
Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentiall… |
|
CVE-2024-27247
MEDIUM 5.5
Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of… |
|
CVE-2024-26230
HIGH 7.8
Windows Telephony Server Elevation of Privilege Vulnerability |
|
CVE-2024-20670
HIGH 8.1
Outlook for Windows Spoofing Vulnerability |
|
CVE-2024-29988
SmartScreen Prompt Security Feature Bypass Vulnerability |
|
CVE-2024-29066
HIGH · vendor
Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
|
CVE-2024-29064
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-29062
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-29061
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-29056
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2024-29052
HIGH · vendor
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2024-29050
HIGH · vendor
Windows Cryptographic Services Remote Code Execution Vulnerability |
|
CVE-2024-28925
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-28924
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-28923
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-28922
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-28921
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-28920
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-28919
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-28907
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2024-28905
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2024-28904
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2024-28903
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-28902
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2024-28901
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2024-28900
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2024-28898
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.