Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11
All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2024-30033
HIGH · vendor
Windows

Windows Search Service Elevation of Privilege Vulnerability
CVE-2024-30032
HIGH · vendor
Windows

Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2024-30031
HIGH · vendor
Windows

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2024-30029
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30028
HIGH · vendor
Windows

Win32k Elevation of Privilege Vulnerability
CVE-2024-30027
HIGH · vendor
Windows

NTFS Elevation of Privilege Vulnerability
CVE-2024-30025
HIGH · vendor
Windows

Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-30024
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30023
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30022
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30021
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-30020
HIGH · vendor
Windows

Windows Cryptographic Services Remote Code Execution Vulnerability
CVE-2024-30019
HIGH · vendor
Windows

DHCP Server Service Denial of Service Vulnerability
CVE-2024-30018
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-30017
HIGH · vendor
Windows

Windows Hyper-V Remote Code Execution Vulnerability
CVE-2024-30016
HIGH · vendor
Windows

Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2024-30015
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30014
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30012
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-30011
HIGH · vendor
Windows

Windows Hyper-V Denial of Service Vulnerability
CVE-2024-30010
HIGH · vendor
Windows

Windows Hyper-V Remote Code Execution Vulnerability
CVE-2024-30009
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30008
HIGH · vendor
Windows

Windows DWM Core Library Information Disclosure Vulnerability
CVE-2024-30007
HIGH · vendor
Windows

Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2024-30006
HIGH · vendor
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-30005
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-30004
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-30003
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-30002
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-30001
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-30000
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-29999
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-29998
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-29997
HIGH · vendor
Windows

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-29996
HIGH · vendor
Windows

Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-29994
HIGH · vendor
Windows

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
CVE-2024-26238
HIGH · vendor
Windows

Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability
CVE-2023-40481
HIGH 7.8
7-Zip

7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af…
CVE-2023-40477
HIGH 7.8
WinRAR

RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2024-4368
HIGH 8.8
Chrome Google Chrome

Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…
CVE-2024-4331
HIGH 8.8
Chrome Google Chrome

Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…
CVE-2024-4058
HIGH 8.8
Chrome Google Chrome

Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…
CVE-2024-33899
HIGH 7.1
WinRAR

RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.
CVE-2022-48611
HIGH 7.8
iTunes

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges.
CVE-2024-3840
HIGH 7.5
Chrome Google Chrome

Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation restrictions via a cra…
CVE-2024-3837
HIGH 8.8
Chrome Google Chrome

Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c…
CVE-2024-3834
HIGH 8.8
Chrome Google Chrome

Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…
CVE-2024-3833
HIGH 8.8
Chrome Google Chrome

Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML …
CVE-2024-3832
HIGH 8.8
Chrome Google Chrome

Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Ch…
CVE-2024-3864
HIGH · vendor
Mozilla Thunderbird Mozilla Firefox

Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enou…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM