Vulnerabilities

Tracked app vulnerabilities

11,272 CVEs affect a tracked app or OS (High, all platforms). 229 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 11,272
Actively exploited: 229
Publication window: 2010-07-30 → 2026-08-19

All CVEs 11,272 CISA KEV 229 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

11,272 entries High Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-30003 HIGH 6.8 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH 6.8	—	—	2024-05-14
CVE-2024-30002 HIGH 6.8 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH 6.8	—	—	2024-05-14
CVE-2024-30001 HIGH 6.8 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH 6.8	—	—	2024-05-14
CVE-2024-30000 HIGH 6.8 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH 6.8	—	—	2024-05-14
CVE-2024-29999 HIGH 6.8 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH 6.8	—	—	2024-05-14
CVE-2024-29998 HIGH 6.8 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH 6.8	—	—	2024-05-14
CVE-2024-29997 HIGH 6.8 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH 6.8	—	—	2024-05-14
CVE-2024-29996 HIGH 7.8 2024-05-14 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2024-05-14
CVE-2024-29994 HIGH 7.8 2024-05-14 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2024-05-14
CVE-2024-26238 HIGH 7.8 2024-05-14 Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2024-05-14
CVE-2023-40481 HIGH 7.8 1 app 2024-05-03 7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af…	HIGH 7.8	—	7-Zip	2024-05-03
CVE-2023-40477 HIGH 7.8 1 app 2024-05-03 RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…	HIGH 7.8	—	WinRAR	2024-05-03
CVE-2024-23709 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-23708 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-23707 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-23705 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-23354 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-23351 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-21480 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-21477 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-21475 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-21471 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-20057 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-20056 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-1395 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-1067 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-0043 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-0025 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-0024 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2023-6363 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2023-4622 HIGH 7.0 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH 7.0	—	—	2024-05-01
CVE-2023-43531 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2023-43530 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2023-43529 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2023-33119 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2023-32873 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2023-32871 HIGH 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2024-05-01
CVE-2024-33899 HIGH 7.1 1 app 2024-04-29 RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.	HIGH 7.1	—	WinRAR	2024-04-29
CVE-2022-48611 HIGH 7.8 1 app 2024-04-26 A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges.	HIGH 7.8	—	iTunes	2024-04-26
CVE-2024-26926 HIGH 7.8 2024-04-25 In the Linux kernel, the following vulnerability has been resolved: binder: check offset alignment in binder_get_object() Commit 6d98eb95b450 ("binder: avoid…	HIGH 7.8	—	—	2024-04-25
CVE-2024-26923 HIGH 7.8 2024-04-25 In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect() Garbage collector does not take i…	HIGH 7.8	—	—	2024-04-25
CVE-2024-27791 HIGH 7.1 2024-04-24 The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonom…	HIGH 7.1	—	—	2024-04-24
CVE-2024-3864 HIGH 8.1 1 app 2024-04-16 Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enou…	HIGH 8.1	—	Mozilla Thunderbird	2024-04-16
CVE-2024-3857 HIGH 7.8 1 app 2024-04-16 The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerability affec…	HIGH 7.8	—	Mozilla Thunderbird	2024-04-16
CVE-2024-3854 HIGH 8.8 1 app 2024-04-16 In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads. This vulnerability affects Firefox < 125, Fi…	HIGH 8.8	—	Mozilla Thunderbird	2024-04-16
CVE-2024-3852 HIGH 7.5 1 app 2024-04-16 GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, a…	HIGH 7.5	—	Mozilla Thunderbird	2024-04-16
CVE-2024-29988 HIGH 8.8 KEV 2024-04-09 SmartScreen Prompt Security Feature Bypass Vulnerability	HIGH 8.8	KEV	—	2024-04-09
CVE-2024-29066 HIGH 7.2 2024-04-09 Windows Distributed File System (DFS) Remote Code Execution Vulnerability	HIGH 7.2	—	—	2024-04-09
CVE-2024-29064 HIGH 6.2 2024-04-09 Windows Hyper-V Denial of Service Vulnerability	HIGH 6.2	—	—	2024-04-09
CVE-2024-29062 HIGH 7.1 2024-04-09 Secure Boot Security Feature Bypass Vulnerability	HIGH 7.1	—	—	2024-04-09