Vulnerabilities
Tracked app vulnerabilities
27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,728
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-23203
The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, m… |
|
CVE-2023-42937
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ve… |
|
CVE-2023-42935
MEDIUM 5.5
An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6.4. A local attacker may be able to view the pre… |
|
CVE-2023-42888
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ventura 13.6.4, macOS Sonoma 14.2, macOS… |
|
CVE-2023-42887
MEDIUM 6.3
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.6.4, macOS Sonoma 14.2. An app may be able to read … |
|
CVE-2023-40528
MEDIUM 5.5
This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17, watchOS 10, macOS Sonoma 14, iOS 17 and iPadOS 17, macOS Ventura 13.6… |
|
CVE-2024-0519
HIGH 8.8
KEV
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2024-0518
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2024-0517
HIGH 8.8
Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
|
CVE-2024-0333
MEDIUM 5.3
Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious… |
|
CVE-2023-41974
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be … |
|
CVE-2022-42816
MEDIUM 5.5
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file s… |
|
CVE-2024-21320
HIGH · vendor
Windows Themes Spoofing Vulnerability |
|
CVE-2024-21316
HIGH · vendor
Windows Server Key Distribution Service Security Feature Bypass |
|
CVE-2024-21314
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2024-21313
HIGH · vendor
Windows TCP/IP Information Disclosure Vulnerability |
|
CVE-2024-21311
HIGH · vendor
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2024-21310
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2024-21309
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-21307
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2024-21306
HIGH · vendor
Microsoft Bluetooth Driver Spoofing Vulnerability |
|
CVE-2024-21305
HIGH · vendor
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability |
|
CVE-2024-20700
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-20699
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-20698
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-20697
HIGH · vendor
Windows libarchive Remote Code Execution Vulnerability |
|
CVE-2024-20696
HIGH · vendor
Windows libarchive Remote Code Execution Vulnerability |
|
CVE-2024-20694
HIGH · vendor
Windows CoreMessaging Information Disclosure Vulnerability |
|
CVE-2024-20692
HIGH · vendor
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
|
CVE-2024-20691
HIGH · vendor
Windows Themes Information Disclosure Vulnerability |
|
CVE-2024-20690
HIGH · vendor
Windows Nearby Sharing Spoofing Vulnerability |
|
CVE-2024-20687
HIGH · vendor
Microsoft AllJoyn API Denial of Service Vulnerability |
|
CVE-2024-20686
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-20683
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-20682
HIGH · vendor
Windows Cryptographic Services Remote Code Execution Vulnerability |
|
CVE-2024-20681
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2024-20680
HIGH · vendor
Windows Message Queuing Client (MSMQC) Information Disclosure |
|
CVE-2024-20674
CRITICAL · vendor
Windows Kerberos Security Feature Bypass Vulnerability |
|
CVE-2024-20666
HIGH · vendor
BitLocker Security Feature Bypass Vulnerability |
|
CVE-2024-20664
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2024-20663
HIGH · vendor
Windows Message Queuing Client (MSMQC) Information Disclosure |
|
CVE-2024-20662
HIGH · vendor
Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability |
|
CVE-2024-20661
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2024-20660
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2024-20658
HIGH · vendor
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2024-20657
HIGH · vendor
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2024-20655
HIGH · vendor
Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability |
|
CVE-2024-20654
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-20653
HIGH · vendor
Microsoft Common Log File System Elevation of Privilege Vulnerability |
|
CVE-2024-20652
HIGH · vendor
Windows HTML Platforms Security Feature Bypass Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.