Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 12,531
Actively exploited: 246
Publication window: 2004-07-27 → 2026-11-11

All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2024-9961 HIGH 8.8 2024-10-15 Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gesture…	HIGH 8.8	—		2024-10-15
CVE-2024-9960 HIGH 7.5 2024-10-15 Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…	HIGH 7.5	—		2024-10-15
CVE-2024-9959 HIGH 8.8 2024-10-15 Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit he…	HIGH 8.8	—		2024-10-15
CVE-2024-9957 HIGH 8.8 2024-10-15 Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti…	HIGH 8.8	—		2024-10-15
CVE-2024-9956 HIGH 7.8 iOS 2024-10-15 Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation v…	HIGH 7.8	—	iOS	2024-10-15
CVE-2024-9955 HIGH 8.8 2024-10-15 Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…	HIGH 8.8	—		2024-10-15
CVE-2024-9954 HIGH 8.8 2024-10-15 Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…	HIGH 8.8	—		2024-10-15
CVE-2024-9859 HIGH 8.8 2024-10-11 Type confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium s…	HIGH 8.8	—		2024-10-11
CVE-2024-9603 HIGH 8.8 2024-10-08 Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…	HIGH 8.8	—		2024-10-08
CVE-2024-9602 HIGH 8.8 2024-10-08 Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chro…	HIGH 8.8	—		2024-10-08
CVE-2024-43504 HIGH 7.8 2024-10-08 Microsoft Excel Remote Code Execution Vulnerability	HIGH 7.8	—		2024-10-08
CVE-2024-6197 HIGH · vendor Windows 2024-10-08 Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43615 HIGH · vendor Windows 2024-10-08 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43611 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43608 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43607 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43599 HIGH · vendor Windows 2024-10-08 Remote Desktop Client Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43593 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43592 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43589 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43585 HIGH · vendor Windows 2024-10-08 Code Integrity Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43584 HIGH · vendor Windows 2024-10-08 Windows Scripting Engine Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43583 HIGH · vendor Windows 2024-10-08 Winlogon Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43581 HIGH · vendor Windows 2024-10-08 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43575 HIGH · vendor Windows 2024-10-08 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43574 HIGH · vendor Windows 2024-10-08 Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43572 HIGH · vendor KEV Windows 2024-10-08 Microsoft Management Console Remote Code Execution Vulnerability	HIGH · vendor	KEV	Windows	2024-10-08
CVE-2024-43571 HIGH · vendor Windows 2024-10-08 Sudo for Windows Spoofing Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43570 HIGH · vendor Windows 2024-10-08 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43567 HIGH · vendor Windows 2024-10-08 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43565 HIGH · vendor Windows 2024-10-08 Windows Network Address Translation (NAT) Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43564 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43563 HIGH · vendor Windows 2024-10-08 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43562 HIGH · vendor Windows 2024-10-08 Windows Network Address Translation (NAT) Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43561 HIGH · vendor Windows 2024-10-08 Windows Mobile Broadband Driver Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43560 HIGH · vendor Windows 2024-10-08 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43559 HIGH · vendor Windows 2024-10-08 Windows Mobile Broadband Driver Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43558 HIGH · vendor Windows 2024-10-08 Windows Mobile Broadband Driver Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43557 HIGH · vendor Windows 2024-10-08 Windows Mobile Broadband Driver Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43556 HIGH · vendor Windows 2024-10-08 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43555 HIGH · vendor Windows 2024-10-08 Windows Mobile Broadband Driver Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43554 HIGH · vendor Windows 2024-10-08 Windows Kernel-Mode Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43553 HIGH · vendor Windows 2024-10-08 NT OS Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43552 HIGH · vendor Windows 2024-10-08 Windows Shell Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43551 HIGH · vendor Windows 2024-10-08 Windows Storage Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43550 HIGH · vendor Windows 2024-10-08 Windows Secure Channel Spoofing Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43549 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43547 HIGH · vendor Windows 2024-10-08 Windows Kerberos Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43546 HIGH · vendor Windows 2024-10-08 Windows Cryptographic Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43545 HIGH · vendor Windows 2024-10-08 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM