Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11
All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2024-49107
HIGH · vendor
Windows

WmsRepair Service Elevation of Privilege Vulnerability
CVE-2024-49104
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-49103
HIGH · vendor
Windows

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
CVE-2024-49102
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-49101
HIGH · vendor
Windows

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
CVE-2024-49099
HIGH · vendor
Windows

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
CVE-2024-49098
HIGH · vendor
Windows

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
CVE-2024-49097
HIGH · vendor
Windows

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2024-49096
HIGH · vendor
Windows

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2024-49095
HIGH · vendor
Windows

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
CVE-2024-49094
HIGH · vendor
Windows

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
CVE-2024-49093
HIGH · vendor
Windows

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2024-49092
HIGH · vendor
Windows

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVE-2024-49091
HIGH · vendor
Windows

Windows Domain Name Service Remote Code Execution Vulnerability
CVE-2024-49090
HIGH · vendor
Windows

Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-49089
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-49088
HIGH · vendor
Windows

Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-49087
HIGH · vendor
Windows

Windows Mobile Broadband Driver Information Disclosure Vulnerability
CVE-2024-49086
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-49085
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-49084
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-49083
HIGH · vendor
Windows

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVE-2024-49082
HIGH · vendor
Windows

Windows File Explorer Information Disclosure Vulnerability
CVE-2024-49081
HIGH · vendor
Windows

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
CVE-2024-49080
HIGH · vendor
Windows

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVE-2024-49079
HIGH · vendor
Windows

Input Method Editor (IME) Remote Code Execution Vulnerability
CVE-2024-49078
HIGH · vendor
Windows

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVE-2024-49077
HIGH · vendor
Windows

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVE-2024-49076
HIGH · vendor
Windows

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVE-2024-49075
HIGH · vendor
Windows

Windows Remote Desktop Services Denial of Service Vulnerability
CVE-2024-49074
HIGH · vendor
Windows

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-49073
HIGH · vendor
Windows

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
CVE-2024-49072
HIGH · vendor
Windows

Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2024-12053
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chro…
CVE-2024-7025
HIGH 8.8
Chrome Google Chrome

Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C…
CVE-2024-11702
HIGH 7.5
Mozilla Thunderbird Mozilla Firefox

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history…
CVE-2024-11700
HIGH 8.1
Mozilla Thunderbird Mozilla Firefox

Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of …
CVE-2024-11699
HIGH 8.8
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume tha…
CVE-2024-11697
HIGH 8.8
Mozilla Thunderbird Mozilla Firefox

When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have l…
CVE-2024-11691
HIGH 8.8
Mozilla Thunderbird Mozilla Firefox

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver.…
CVE-2024-11477
HIGH 7.8
7-Zip

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af…
CVE-2024-11395
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…
CVE-2024-11115
HIGH 8.8
Chrome Google Chrome

Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a se…
CVE-2024-11114
HIGH 8.3
Chrome Google Chrome

Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to …
CVE-2024-11113
HIGH 8.8
Chrome Google Chrome

Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially explo…
CVE-2024-11112
HIGH 8.8
Chrome Google Chrome

Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …
CVE-2024-49039
HIGH 8.8 KEV
Windows

Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2024-49033
HIGH 7.5
Microsoft Office Microsoft Word Office

Microsoft Word Security Feature Bypass Vulnerability
CVE-2024-49030
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-49029
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM