Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-1060
HIGH 8.8
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2024-1059
HIGH 8.8
Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML… |
|
CVE-2023-40547
HIGH 8.3
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allow… |
|
CVE-2024-0813
HIGH 8.8
Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially… |
|
CVE-2024-0812
HIGH 8.8
Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a … |
|
CVE-2024-0807
HIGH 8.8
Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
|
CVE-2024-0806
HIGH 8.8
Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interactio… |
|
CVE-2024-0804
HIGH 7.5
Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HT… |
|
CVE-2024-0755
HIGH · vendor
Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume tha… |
|
CVE-2024-0751
HIGH · vendor
A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 11… |
|
CVE-2024-0750
HIGH 8.8
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affect… |
|
CVE-2024-0519
HIGH 8.8
KEV
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2024-0518
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2024-0517
HIGH 8.8
Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
|
CVE-2024-21320
HIGH · vendor
Windows Themes Spoofing Vulnerability |
|
CVE-2024-21316
HIGH · vendor
Windows Server Key Distribution Service Security Feature Bypass |
|
CVE-2024-21314
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2024-21313
HIGH · vendor
Windows TCP/IP Information Disclosure Vulnerability |
|
CVE-2024-21311
HIGH · vendor
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2024-21310
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2024-21309
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-21307
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2024-21306
HIGH · vendor
Microsoft Bluetooth Driver Spoofing Vulnerability |
|
CVE-2024-21305
HIGH · vendor
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability |
|
CVE-2024-20699
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-20698
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-20697
HIGH · vendor
Windows libarchive Remote Code Execution Vulnerability |
|
CVE-2024-20696
HIGH · vendor
Windows libarchive Remote Code Execution Vulnerability |
|
CVE-2024-20694
HIGH · vendor
Windows CoreMessaging Information Disclosure Vulnerability |
|
CVE-2024-20692
HIGH · vendor
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
|
CVE-2024-20691
HIGH · vendor
Windows Themes Information Disclosure Vulnerability |
|
CVE-2024-20690
HIGH · vendor
Windows Nearby Sharing Spoofing Vulnerability |
|
CVE-2024-20687
HIGH · vendor
Microsoft AllJoyn API Denial of Service Vulnerability |
|
CVE-2024-20686
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-20683
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-20682
HIGH · vendor
Windows Cryptographic Services Remote Code Execution Vulnerability |
|
CVE-2024-20681
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2024-20680
HIGH · vendor
Windows Message Queuing Client (MSMQC) Information Disclosure |
|
CVE-2024-20666
HIGH · vendor
BitLocker Security Feature Bypass Vulnerability |
|
CVE-2024-20664
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2024-20663
HIGH · vendor
Windows Message Queuing Client (MSMQC) Information Disclosure |
|
CVE-2024-20662
HIGH · vendor
Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability |
|
CVE-2024-20661
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2024-20660
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2024-20658
HIGH · vendor
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2024-20657
HIGH · vendor
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2024-20655
HIGH · vendor
Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability |
|
CVE-2024-20654
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-20653
HIGH · vendor
Microsoft Common Log File System Elevation of Privilege Vulnerability |
|
CVE-2024-20652
HIGH · vendor
Windows HTML Platforms Security Feature Bypass Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.