Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 27,728
Actively exploited: 377
Publication window: 2004-07-27 → 2026-11-11

All CVEs 27,728 CISA KEV 377 Public exploit 503 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2023-24948 HIGH · vendor Windows 2023-05-09 Windows Bluetooth Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24947 HIGH · vendor Windows 2023-05-09 Windows Bluetooth Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24946 HIGH · vendor Windows 2023-05-09 Windows Backup Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24945 HIGH · vendor Windows 2023-05-09 Windows iSCSI Target Service Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24944 HIGH · vendor Windows 2023-05-09 Windows Bluetooth Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24943 CRITICAL · vendor Windows 2023-05-09 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-05-09
CVE-2023-24942 HIGH · vendor Windows 2023-05-09 Remote Procedure Call Runtime Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24941 CRITICAL · vendor Windows 2023-05-09 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-05-09
CVE-2023-24940 HIGH · vendor Windows 2023-05-09 Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24939 HIGH · vendor Windows 2023-05-09 Server for NFS Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24932 HIGH · vendor Windows 2023-05-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24905 HIGH · vendor Windows 2023-05-09 Remote Desktop Client Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24903 CRITICAL · vendor Windows 2023-05-09 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-05-09
CVE-2023-24902 HIGH · vendor Windows 2023-05-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24901 HIGH · vendor Windows 2023-05-09 Windows NFS Portmapper Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24900 HIGH · vendor Windows 2023-05-09 Windows NTLM Security Support Provider Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24899 HIGH · vendor Windows 2023-05-09 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24898 HIGH · vendor Windows 2023-05-09 Windows SMB Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-27967 HIGH 8.6 Xcode 2023-05-08 The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute arbitrary code out of its sandbox or wi…	HIGH 8.6	—	Xcode	2023-05-08
CVE-2023-27952 MEDIUM 4.7 macOS 2023-05-08 A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks.	MEDIUM 4.7	—	macOS	2023-05-08
CVE-2023-27945 MEDIUM 6.3 Xcode 2023-05-08 This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be abl…	MEDIUM 6.3	—	Xcode	2023-05-08
CVE-2023-2468 MEDIUM 4.3 2023-05-03 Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to …	MEDIUM 4.3	—		2023-05-03
CVE-2023-2467 MEDIUM 4.3 2023-05-03 Inappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to bypass permissions restrictions via a c…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2466 MEDIUM 4.3 2023-05-03 Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to spoof the contents of the security UI via a crafte…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2465 MEDIUM 4.3 2023-05-03 Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chro…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2464 MEDIUM 4.3 2023-05-03 Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extens…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2463 MEDIUM 4.3 2023-05-03 Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnib…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2462 MEDIUM 4.3 2023-05-03 Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2461 HIGH 8.8 2023-05-03 Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interact…	HIGH 8.8	—		2023-05-03
CVE-2023-2460 HIGH 7.1 2023-05-03 Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a maliciou…	HIGH 7.1	—		2023-05-03
CVE-2023-2459 MEDIUM 6.5 2023-05-03 Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML …	MEDIUM 6.5	—		2023-05-03
CVE-2023-26085 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-21666 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-21665 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-21118 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-21117 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-21116 MEDIUM · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2023-05-01
CVE-2023-21112 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-21110 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-21109 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-21107 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-21106 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-21104 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-21102 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-20993 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-20930 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-20914 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-20726 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-20699 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01
CVE-2023-20698 HIGH · vendor Android 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-05-01

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM