Vulnerabilities

Tracked app vulnerabilities

27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 27,728
Actively exploited: 377
Publication window: 2004-07-27 → 2026-11-11

All CVEs 27,728 CISA KEV 377 Public exploit 503 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

27,728 entries Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2023-0138 HIGH 8.8 2023-01-10 Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted H…	HIGH 8.8	—		2023-01-10
CVE-2023-0137 HIGH 8.8 2023-01-10 Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious exte…	HIGH 8.8	—		2023-01-10
CVE-2023-0136 HIGH 8.8 2023-01-10 Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI…	HIGH 8.8	—		2023-01-10
CVE-2023-0135 HIGH 8.8 2023-01-10 Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit…	HIGH 8.8	—		2023-01-10
CVE-2023-0134 HIGH 8.8 2023-01-10 Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit…	HIGH 8.8	—		2023-01-10
CVE-2023-0133 MEDIUM 6.5 2023-01-10 Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permis…	MEDIUM 6.5	—		2023-01-10
CVE-2023-0132 MEDIUM 6.5 2023-01-10 Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a per…	MEDIUM 6.5	—		2023-01-10
CVE-2023-0131 MEDIUM 6.5 2023-01-10 Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a …	MEDIUM 6.5	—		2023-01-10
CVE-2023-0130 MEDIUM 6.5 2023-01-10 Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omn…	MEDIUM 6.5	—		2023-01-10
CVE-2023-0129 HIGH 8.8 2023-01-10 Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to po…	HIGH 8.8	—		2023-01-10
CVE-2023-0128 HIGH 8.8 2023-01-10 Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI in…	HIGH 8.8	—		2023-01-10
CVE-2023-21776 HIGH · vendor Windows 2023-01-10 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21774 HIGH · vendor Windows 2023-01-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21773 HIGH · vendor Windows 2023-01-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21772 HIGH · vendor Windows 2023-01-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21771 HIGH · vendor Windows 2023-01-10 Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21768 HIGH · vendor Windows 2023-01-10 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21767 HIGH · vendor Windows 2023-01-10 Windows Overlay Filter Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21766 HIGH · vendor Windows 2023-01-10 Windows Overlay Filter Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21765 HIGH · vendor Windows 2023-01-10 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21760 HIGH · vendor Windows 2023-01-10 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21759 HIGH · vendor Windows 2023-01-10 Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21758 HIGH · vendor Windows 2023-01-10 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21757 HIGH · vendor Windows 2023-01-10 Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21755 HIGH · vendor Windows 2023-01-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21754 HIGH · vendor Windows 2023-01-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21753 HIGH · vendor Windows 2023-01-10 Event Tracing for Windows Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21752 HIGH · vendor Windows 2023-01-10 Windows Backup Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21750 HIGH · vendor Windows 2023-01-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21749 HIGH · vendor Windows 2023-01-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21747 HIGH · vendor Windows 2023-01-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21746 HIGH · vendor Windows 2023-01-10 Windows NTLM Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21739 HIGH · vendor Windows 2023-01-10 Windows Bluetooth Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21733 HIGH · vendor Windows 2023-01-10 Windows Bind Filter Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21732 HIGH · vendor Windows 2023-01-10 Microsoft ODBC Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21730 CRITICAL · vendor Windows 2023-01-10 Microsoft Cryptographic Services Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2023-01-10
CVE-2023-21728 HIGH · vendor Windows 2023-01-10 Windows Netlogon Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21726 HIGH · vendor Windows 2023-01-10 Windows Credential Manager User Interface Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21724 HIGH · vendor Windows 2023-01-10 Microsoft DWM Core Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21712 CRITICAL · vendor Windows 2023-01-10 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-01-10
CVE-2023-21683 HIGH · vendor Windows 2023-01-10 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21682 HIGH · vendor Windows 2023-01-10 Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21681 HIGH · vendor Windows 2023-01-10 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21680 HIGH · vendor Windows 2023-01-10 Windows Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21679 CRITICAL · vendor Windows 2023-01-10 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-01-10
CVE-2023-21678 HIGH · vendor Windows 2023-01-10 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21677 HIGH · vendor Windows 2023-01-10 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21676 HIGH · vendor Windows 2023-01-10 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21675 HIGH · vendor Windows 2023-01-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-01-10
CVE-2023-21674 HIGH · vendor KEV Windows 2023-01-10 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2023-01-10

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM