Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11
All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2024-37975
HIGH · vendor
Windows

Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37974
HIGH · vendor
Windows

Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37973
HIGH · vendor
Windows

Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37972
HIGH · vendor
Windows

Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37971
HIGH · vendor
Windows

Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37970
HIGH · vendor
Windows

Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37969
HIGH · vendor
Windows

Secure Boot Security Feature Bypass Vulnerability
CVE-2024-35270
HIGH · vendor
Windows

Windows iSCSI Service Denial of Service Vulnerability
CVE-2024-30098
HIGH · vendor
Windows

Windows Cryptographic Services Security Feature Bypass Vulnerability
CVE-2024-30081
HIGH · vendor
Windows

Windows NTLM Spoofing Vulnerability
CVE-2024-30079
HIGH · vendor
Windows

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2024-30071
HIGH · vendor
Windows

Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-30013
HIGH · vendor
Windows

Windows MultiPoint Services Remote Code Execution Vulnerability
CVE-2024-28899
HIGH · vendor
Windows

Secure Boot Security Feature Bypass Vulnerability
CVE-2024-26184
HIGH · vendor
Windows

Secure Boot Security Feature Bypass Vulnerability
CVE-2024-21417
HIGH · vendor
Windows

Windows Text Services Framework Elevation of Privilege Vulnerability
CVE-2024-6293
HIGH 8.8
Chrome Google Chrome

Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…
CVE-2024-6292
HIGH 8.8
Chrome Google Chrome

Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…
CVE-2024-6291
HIGH 8.8
Chrome Google Chrome

Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…
CVE-2024-6290
HIGH 8.8
Chrome Google Chrome

Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…
CVE-2024-6103
HIGH 8.8
Chrome Google Chrome

Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…
CVE-2024-6102
HIGH 8.8
Chrome Google Chrome

Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM…
CVE-2024-6101
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML…
CVE-2024-6100
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s…
CVE-2024-5847
HIGH 8.8
Chrome Google Chrome

Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro…
CVE-2024-5846
HIGH 8.8
Chrome Google Chrome

Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro…
CVE-2024-5845
HIGH 8.8
Chrome Google Chrome

Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chrom…
CVE-2024-5844
HIGH 8.8
Chrome Google Chrome

Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML …
CVE-2024-5842
HIGH 8.8
Chrome Google Chrome

Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfor…
CVE-2024-5841
HIGH 8.8
Chrome Google Chrome

Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…
CVE-2024-5838
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromiu…
CVE-2024-5837
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pa…
CVE-2024-5836
HIGH 8.8
Chrome Google Chrome

Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to e…
CVE-2024-5835
HIGH 8.8
Chrome Google Chrome

Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to …
CVE-2024-5834
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chro…
CVE-2024-5833
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pa…
CVE-2024-5832
HIGH 8.8
Chrome Google Chrome

Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…
CVE-2024-5831
HIGH 8.8
Chrome Google Chrome

Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…
CVE-2024-5830
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chrom…
CVE-2024-35265
HIGH 7.0
Windows

Windows Perception Service Elevation of Privilege Vulnerability
CVE-2024-35250
HIGH 7.8 KEV
Windows

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-30104
HIGH 7.8
Microsoft Office Office

Microsoft Office Remote Code Execution Vulnerability
CVE-2024-30103
HIGH 8.8
Microsoft Office Microsoft Outlook Office

Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-30101
HIGH 7.5
Microsoft Office Office

Microsoft Office Remote Code Execution Vulnerability
CVE-2024-30099
HIGH 7.0
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-30097
HIGH 8.8
Windows

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
CVE-2024-30095
HIGH 7.8
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30094
HIGH 7.8
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30093
HIGH 7.3
Windows

Windows Storage Elevation of Privilege Vulnerability
CVE-2024-30091
HIGH 7.8
Windows

Win32k Elevation of Privilege Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM