Vulnerabilities
Tracked app vulnerabilities
27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,728
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-0927
HIGH 8.8
Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to po… |
|
CVE-2023-24329
HIGH 7.5
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank charac… |
|
CVE-2021-43529
CRITICAL 9.8
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3… |
|
CVE-2023-21823
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2023-23376
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2023-21822
HIGH 7.8
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2023-21820
HIGH 7.4
Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
|
CVE-2023-21819
HIGH 7.5
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2023-21818
HIGH 7.5
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2023-21817
HIGH 7.8
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2023-21816
HIGH 7.5
Windows Active Directory Domain Services API Denial of Service Vulnerability |
|
CVE-2023-21813
HIGH 7.5
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2023-21812
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2023-21811
HIGH 7.5
Windows iSCSI Service Denial of Service Vulnerability |
|
CVE-2023-21805
HIGH 7.8
Windows MSHTML Platform Remote Code Execution Vulnerability |
|
CVE-2023-21804
HIGH 7.8
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2023-21803
CRITICAL 9.8
Windows iSCSI Discovery Service Remote Code Execution Vulnerability |
|
CVE-2023-21802
HIGH 7.8
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-21801
HIGH 7.8
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-21799
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-21798
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2023-21797
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2023-21721
MEDIUM 6.5
Microsoft OneNote Elevation of Privilege Vulnerability |
|
CVE-2023-21716
CRITICAL 9.8
Microsoft Word Remote Code Execution Vulnerability |
|
CVE-2023-21714
MEDIUM 5.5
Microsoft Office Information Disclosure Vulnerability |
|
CVE-2023-21702
HIGH 7.5
Windows iSCSI Service Denial of Service Vulnerability |
|
CVE-2023-21701
HIGH 7.5
Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability |
|
CVE-2023-21700
HIGH 7.5
Windows iSCSI Discovery Service Denial of Service Vulnerability |
|
CVE-2023-21699
MEDIUM 5.3
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
|
CVE-2023-21697
MEDIUM 6.2
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
|
CVE-2023-21695
HIGH 7.5
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-21694
MEDIUM 6.8
Windows Fax Service Remote Code Execution Vulnerability |
|
CVE-2023-21693
MEDIUM 5.7
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
|
CVE-2023-21692
CRITICAL 9.8
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-21691
HIGH 7.5
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability |
|
CVE-2023-21690
CRITICAL 9.8
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-21689
CRITICAL 9.8
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-21688
HIGH 7.8
NT OS Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21687
MEDIUM 5.5
HTTP.sys Information Disclosure Vulnerability |
|
CVE-2023-21686
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-21685
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-21684
HIGH 8.8
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-0705
HIGH 7.5
Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition to potentially exploit heap corruption … |
|
CVE-2023-0704
MEDIUM 6.5
Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings v… |
|
CVE-2023-0703
HIGH 8.8
Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to pote… |
|
CVE-2023-0702
HIGH 8.8
Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to… |
|
CVE-2023-0701
HIGH 8.8
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to p… |
|
CVE-2023-0700
MEDIUM 6.5
Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox (UR… |
|
CVE-2023-0699
HIGH 8.8
Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page and brow… |
|
CVE-2023-0698
HIGH 8.8
Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.