Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
27,728
Actively exploited
377
Publication window
2004-07-27 → 2026-11-11
All CVEs 27,728 CISA KEV 377 Public exploit 503 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all
CVE
CVE-2023-36402
HIGH · vendor
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-36401
HIGH · vendor
Windows

Microsoft Remote Registry Service Remote Code Execution Vulnerability
CVE-2023-36400
CRITICAL · vendor
Windows

Windows HMAC Key Derivation Elevation of Privilege Vulnerability
CVE-2023-36399
HIGH · vendor
Windows

Windows Storage Elevation of Privilege Vulnerability
CVE-2023-36398
HIGH · vendor
Windows

Windows NTFS Information Disclosure Vulnerability
CVE-2023-36397
CRITICAL · vendor
Windows

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-36396
HIGH · vendor
Windows

Windows Compressed Folder Remote Code Execution Vulnerability
CVE-2023-36395
HIGH · vendor
Windows

Windows Deployment Services Denial of Service Vulnerability
CVE-2023-36394
HIGH · vendor
Windows

Windows Search Service Elevation of Privilege Vulnerability
CVE-2023-36393
HIGH · vendor
Windows

Windows User Interface Application Core Remote Code Execution Vulnerability
CVE-2023-36392
HIGH · vendor
Windows

DHCP Server Service Denial of Service Vulnerability
CVE-2023-36047
HIGH · vendor
Windows

Windows Authentication Elevation of Privilege Vulnerability
CVE-2023-36046
HIGH · vendor
Windows

Windows Authentication Denial of Service Vulnerability
CVE-2023-36036
HIGH · vendor KEV
Windows

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36033
HIGH · vendor KEV
Windows

Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2023-36028
HIGH · vendor
Windows

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-36025
HIGH · vendor KEV
Windows

Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-36017
HIGH · vendor
Windows

Windows Scripting Engine Memory Corruption Vulnerability
CVE-2023-5996
HIGH 8.8
Chrome Google Chrome

Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…
CVE-2023-31102
HIGH 7.8
7-Zip

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.
CVE-2023-36029
MEDIUM 4.3
Microsoft Edge

Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2023-5859
MEDIUM 4.3
Chrome Google Chrome

Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted local H…
CVE-2023-5858
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML …
CVE-2023-5857
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malici…
CVE-2023-5856
HIGH 8.8
Chrome Google Chrome

Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten…
CVE-2023-5855
HIGH 8.8
Chrome Google Chrome

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to pot…
CVE-2023-5854
HIGH 8.8
Chrome Google Chrome

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti…
CVE-2023-5853
MEDIUM 4.3
Chrome Google Chrome

Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromi…
CVE-2023-5852
HIGH 8.8
Chrome Google Chrome

Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti…
CVE-2023-5851
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. …
CVE-2023-5850
MEDIUM 4.3
Chrome Google Chrome

Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Ch…
CVE-2023-5849
HIGH 8.8
Chrome Google Chrome

Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…
CVE-2023-5482
HIGH 8.8
Chrome Google Chrome

Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTM…
CVE-2023-5480
MEDIUM 6.1
Chrome Google Chrome

Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XSS preventions via a malicious file. (Ch…
CVE-2023-40124
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40115
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40114
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40113
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40112
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40111
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40110
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40109
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40107
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40106
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40105
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40104
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40100
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33074
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33061
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33059
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM