Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-0225
HIGH 8.8
Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2024-0224
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
|
CVE-2024-0223
HIGH 8.8
Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
|
CVE-2024-0222
HIGH 8.8
Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap… |
|
CVE-2023-7024
HIGH 8.8
KEV
Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
|
CVE-2023-6864
HIGH · vendor
Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume tha… |
|
CVE-2023-6863
HIGH · vendor
The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnera… |
|
CVE-2023-6862
HIGH 8.8
A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR < 1… |
|
CVE-2023-6861
HIGH 8.8
The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR < 115.6… |
|
CVE-2023-6859
HIGH 8.8
A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Fi… |
|
CVE-2023-6858
HIGH · vendor
Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerability affects Firefox ESR < 115.6, Thunder… |
|
CVE-2023-6856
HIGH · vendor
The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an att… |
|
CVE-2023-6707
HIGH 8.8
Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
|
CVE-2023-6706
HIGH 8.8
Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engage in specific UI interaction to potenti… |
|
CVE-2023-6705
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2023-6704
HIGH 8.8
Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted image file. (… |
|
CVE-2023-6703
HIGH 8.8
Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
|
CVE-2023-6702
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2023-36696
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2023-36391
HIGH · vendor
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability |
|
CVE-2023-36012
HIGH · vendor
DHCP Server Service Information Disclosure Vulnerability |
|
CVE-2023-36011
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2023-36006
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-36005
HIGH · vendor
Windows Telephony Server Elevation of Privilege Vulnerability |
|
CVE-2023-36004
HIGH · vendor
Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability |
|
CVE-2023-36003
HIGH · vendor
XAML Diagnostics Elevation of Privilege Vulnerability |
|
CVE-2023-35644
HIGH · vendor
Windows Sysmain Service Elevation of Privilege Vulnerability |
|
CVE-2023-35643
HIGH · vendor
DHCP Server Service Information Disclosure Vulnerability |
|
CVE-2023-35642
HIGH · vendor
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2023-35639
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2023-35638
HIGH · vendor
DHCP Server Service Denial of Service Vulnerability |
|
CVE-2023-35635
HIGH · vendor
Windows Kernel Denial of Service Vulnerability |
|
CVE-2023-35634
HIGH · vendor
Windows Bluetooth Driver Remote Code Execution Vulnerability |
|
CVE-2023-35632
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2023-35631
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2023-35622
HIGH · vendor
Windows DNS Spoofing Vulnerability |
|
CVE-2023-21740
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-20588
HIGH · vendor
AMD: CVE-2023-20588 AMD Speculative Leaks Security Notice |
|
CVE-2023-6510
HIGH 8.8
Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction to … |
|
CVE-2023-6509
HIGH 8.8
Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction… |
|
CVE-2023-6508
HIGH 8.8
Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
|
CVE-2023-6351
HIGH 8.8
Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (C… |
|
CVE-2023-6350
HIGH 8.8
Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (C… |
|
CVE-2023-6348
HIGH 8.8
Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
|
CVE-2023-6347
HIGH 8.8
Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2023-6346
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
|
CVE-2023-6212
HIGH · vendor
Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume tha… |
|
CVE-2023-6208
HIGH · vendor
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboa… |
|
CVE-2023-6207
HIGH 8.8
Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5. |
|
CVE-2023-6112
HIGH 8.8
Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.