Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11
All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2024-1936
HIGH 7.5
Mozilla Thunderbird

The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email message in Thunderbird's local cache. Conse…
CVE-2024-1939
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…
CVE-2024-1938
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chrom…
CVE-2024-1675
HIGH 8.8
Chrome Google Chrome

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted H…
CVE-2024-1674
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HT…
CVE-2024-1673
HIGH 8.8
Chrome Google Chrome

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially explo…
CVE-2024-1670
HIGH 8.8
Chrome Google Chrome

Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…
CVE-2024-1669
HIGH 8.8
Chrome Google Chrome

Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTM…
CVE-2024-1553
HIGH 8.1
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume tha…
CVE-2024-1552
HIGH · vendor
Mozilla Thunderbird Mozilla Firefox

Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices.…
CVE-2024-1546
HIGH 7.5
Mozilla Thunderbird Mozilla Firefox

When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. This vulne…
CVE-2024-21420
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21412
HIGH 8.1 KEV
Windows

Internet Shortcut Files Security Feature Bypass Vulnerability
CVE-2024-21406
HIGH 7.5
Windows

Windows Printing Service Spoofing Vulnerability
CVE-2024-21405
HIGH 7.0
Windows

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2024-21391
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21384
HIGH 7.8
Microsoft Office Office

Microsoft Office OneNote Remote Code Execution Vulnerability
CVE-2024-21379
HIGH 7.8
Microsoft Office Microsoft Word Office

Microsoft Word Remote Code Execution Vulnerability
CVE-2024-21378
HIGH 8.8
Microsoft Office Microsoft Outlook Office

Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-21375
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21372
HIGH 8.8
Windows

Windows OLE Remote Code Execution Vulnerability
CVE-2024-21371
HIGH 7.0
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-21370
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21369
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21368
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21367
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21366
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21365
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21363
HIGH 7.8
Windows

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-21361
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21360
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21359
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21358
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21357
HIGH 8.1
Windows

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2024-21355
HIGH 7.0
Windows

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2024-21354
HIGH 7.8
Windows

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2024-21352
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21351
HIGH 7.6 KEV
Windows

Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2024-21350
HIGH 8.8
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21349
HIGH 8.8
Windows

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
CVE-2024-21348
HIGH 7.5
Windows

Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2024-21347
HIGH 7.5
Windows

Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2024-21346
HIGH 7.8
Windows

Win32k Elevation of Privilege Vulnerability
CVE-2024-21338
HIGH 7.8 KEV
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-20673
HIGH 7.8
Microsoft Excel Microsoft Office Microsoft PowerPoint Microsoft Word +1

Microsoft Office Remote Code Execution Vulnerability
CVE-2024-21353
HIGH · vendor
Windows

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
CVE-2024-21345
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-21342
HIGH · vendor
Windows

Windows DNS Client Denial of Service Vulnerability
CVE-2023-50387
HIGH · vendor
Windows

MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers
CVE-2024-1077
HIGH 8.8
Chrome Google Chrome

Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chro…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM