Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11
All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2024-49028
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-49027
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-49026
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-49019
HIGH 7.8
Windows

Active Directory Certificate Services Elevation of Privilege Vulnerability
CVE-2024-49046
HIGH · vendor
Windows

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2024-43646
HIGH · vendor
Windows

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-43645
HIGH · vendor
Windows

Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability
CVE-2024-43644
HIGH · vendor
Windows

Windows Client-Side Caching Elevation of Privilege Vulnerability
CVE-2024-43643
HIGH · vendor
Windows

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43642
HIGH · vendor
Windows

Windows SMB Denial of Service Vulnerability
CVE-2024-43641
HIGH · vendor
Windows

Windows Registry Elevation of Privilege Vulnerability
CVE-2024-43640
HIGH · vendor
Windows

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-43638
HIGH · vendor
Windows

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43637
HIGH · vendor
Windows

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43636
HIGH · vendor
Windows

Win32k Elevation of Privilege Vulnerability
CVE-2024-43635
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43634
HIGH · vendor
Windows

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43633
HIGH · vendor
Windows

Windows Hyper-V Denial of Service Vulnerability
CVE-2024-43631
HIGH · vendor
Windows

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-43630
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43629
HIGH · vendor
Windows

Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2024-43628
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43627
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43626
HIGH · vendor
Windows

Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2024-43624
HIGH · vendor
Windows

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
CVE-2024-43623
HIGH · vendor
Windows

Windows NT OS Kernel Elevation of Privilege Vulnerability
CVE-2024-43622
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43621
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43620
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43530
HIGH · vendor
Windows

Windows Update Stack Elevation of Privilege Vulnerability
CVE-2024-43452
HIGH · vendor
Windows

Windows Registry Elevation of Privilege Vulnerability
CVE-2024-43451
HIGH · vendor KEV
Windows

NTLM Hash Disclosure Spoofing Vulnerability
CVE-2024-43450
HIGH · vendor
Windows

Windows DNS Spoofing Vulnerability
CVE-2024-43449
HIGH · vendor
Windows

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43447
HIGH · vendor
Windows

Windows SMBv3 Server Remote Code Execution Vulnerability
CVE-2024-38264
HIGH · vendor
Windows

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
CVE-2024-38203
HIGH · vendor
Windows

Windows Package Library Manager Information Disclosure Vulnerability
CVE-2024-10827
HIGH 8.8
Chrome Google Chrome

Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…
CVE-2024-10826
HIGH 8.8
Chrome Google Chrome

Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a…
CVE-2024-10488
HIGH 8.8
Chrome Google Chrome

Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…
CVE-2024-10487
HIGH 8.8
Chrome Google Chrome

Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (…
CVE-2024-10467
HIGH 8.8
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume tha…
CVE-2024-10466
HIGH 7.5
Mozilla Thunderbird Mozilla Firefox

By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive. This vulnerability…
CVE-2024-10459
HIGH 7.5
Mozilla Thunderbird Mozilla Firefox

An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox <…
CVE-2024-10458
HIGH 7.5
Mozilla Thunderbird Mozilla Firefox

A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox < 132, Fire…
CVE-2024-10231
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…
CVE-2024-10230
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…
CVE-2024-10229
HIGH 8.1
Chrome Google Chrome

Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Exte…
CVE-2024-9287
HIGH 7.8
Python 3.12 Python 3.13 Python 3.14

A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, all…
CVE-2024-9965
HIGH 8.8
Chrome Google Chrome

Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specifi…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM