Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-38237
HIGH 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38236
HIGH 7.5
DHCP Server Service Denial of Service Vulnerability |
|
CVE-2024-38226
HIGH 7.3
KEV
Microsoft Publisher Security Feature Bypass Vulnerability |
|
CVE-2024-38119
HIGH 7.5
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
|
CVE-2024-38046
HIGH 7.8
PowerShell Elevation of Privilege Vulnerability |
|
CVE-2024-38045
HIGH 8.1
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2024-38014
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2024-30073
HIGH 7.8
Windows Security Zone Mapping Security Feature Bypass Vulnerability |
|
CVE-2024-21416
HIGH 8.1
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2024-43495
HIGH · vendor
Windows libarchive Remote Code Execution Vulnerability |
|
CVE-2024-43458
HIGH · vendor
Windows Networking Information Disclosure Vulnerability |
|
CVE-2024-43457
HIGH · vendor
Windows Setup and Deployment Elevation of Privilege Vulnerability |
|
CVE-2024-38233
HIGH · vendor
Windows Networking Denial of Service Vulnerability |
|
CVE-2024-38232
HIGH · vendor
Windows Networking Denial of Service Vulnerability |
|
CVE-2024-7652
HIGH 7.5
An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an ex… |
|
CVE-2024-8362
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
|
CVE-2024-7970
HIGH 8.8
Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
|
CVE-2024-6232
HIGH · vendor
There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing … |
|
CVE-2024-8198
HIGH 8.8
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
|
CVE-2024-8194
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2024-8193
HIGH 8.8
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
|
CVE-2024-41879
HIGH 7.8
Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… |
|
CVE-2024-7980
HIGH 7.8
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a cra… |
|
CVE-2024-7979
HIGH 7.8
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a cra… |
|
CVE-2024-7977
HIGH 7.8
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a mal… |
|
CVE-2024-7974
HIGH 8.8
Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted C… |
|
CVE-2024-7973
HIGH 8.8
Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file… |
|
CVE-2024-7972
HIGH 8.8
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a c… |
|
CVE-2024-7969
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2024-7968
HIGH 8.8
Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI interactions t… |
|
CVE-2024-7967
HIGH 8.8
Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
|
CVE-2024-7966
HIGH 8.8
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out o… |
|
CVE-2024-7965
HIGH 8.8
KEV
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2024-7964
HIGH 8.8
Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
|
CVE-2024-7592
HIGH · vendor
There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backsla… |
|
CVE-2024-38171
HIGH 7.8
Microsoft PowerPoint Remote Code Execution Vulnerability |
|
CVE-2024-38223
HIGH · vendor
Windows Initial Machine Configuration Elevation of Privilege Vulnerability |
|
CVE-2024-38215
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38214
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2024-38202
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2024-38199
HIGH · vendor
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
|
CVE-2024-38198
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2024-38196
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38193
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2024-38191
HIGH · vendor
Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38187
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38186
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38185
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38184
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38180
HIGH · vendor
Windows SmartScreen Security Feature Bypass Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.