Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11
All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2023-5997
HIGH 8.8
Chrome Google Chrome

Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…
CVE-2023-36041
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-36037
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Security Feature Bypass Vulnerability
CVE-2023-36719
HIGH · vendor
Windows

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
CVE-2023-36705
HIGH · vendor
Windows

Windows Installer Elevation of Privilege Vulnerability
CVE-2023-36428
HIGH · vendor
Windows

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
CVE-2023-36427
HIGH · vendor
Windows

Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2023-36425
HIGH · vendor
Windows

Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVE-2023-36424
HIGH · vendor KEV
Windows

Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36423
HIGH · vendor
Windows

Microsoft Remote Registry Service Remote Code Execution Vulnerability
CVE-2023-36408
HIGH · vendor
Windows

Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2023-36407
HIGH · vendor
Windows

Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2023-36406
HIGH · vendor
Windows

Windows Hyper-V Information Disclosure Vulnerability
CVE-2023-36405
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-36404
HIGH · vendor
Windows

Windows Kernel Information Disclosure Vulnerability
CVE-2023-36403
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-36402
HIGH · vendor
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-36401
HIGH · vendor
Windows

Microsoft Remote Registry Service Remote Code Execution Vulnerability
CVE-2023-36399
HIGH · vendor
Windows

Windows Storage Elevation of Privilege Vulnerability
CVE-2023-36398
HIGH · vendor
Windows

Windows NTFS Information Disclosure Vulnerability
CVE-2023-36396
HIGH · vendor
Windows

Windows Compressed Folder Remote Code Execution Vulnerability
CVE-2023-36395
HIGH · vendor
Windows

Windows Deployment Services Denial of Service Vulnerability
CVE-2023-36394
HIGH · vendor
Windows

Windows Search Service Elevation of Privilege Vulnerability
CVE-2023-36393
HIGH · vendor
Windows

Windows User Interface Application Core Remote Code Execution Vulnerability
CVE-2023-36392
HIGH · vendor
Windows

DHCP Server Service Denial of Service Vulnerability
CVE-2023-36047
HIGH · vendor
Windows

Windows Authentication Elevation of Privilege Vulnerability
CVE-2023-36046
HIGH · vendor
Windows

Windows Authentication Denial of Service Vulnerability
CVE-2023-36036
HIGH · vendor KEV
Windows

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36033
HIGH · vendor KEV
Windows

Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2023-36028
HIGH · vendor
Windows

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-36025
HIGH · vendor KEV
Windows

Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-36017
HIGH · vendor
Windows

Windows Scripting Engine Memory Corruption Vulnerability
CVE-2023-5996
HIGH 8.8
Chrome Google Chrome

Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…
CVE-2023-31102
HIGH 7.8
7-Zip

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.
CVE-2023-5857
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malici…
CVE-2023-5856
HIGH 8.8
Chrome Google Chrome

Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten…
CVE-2023-5855
HIGH 8.8
Chrome Google Chrome

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to pot…
CVE-2023-5854
HIGH 8.8
Chrome Google Chrome

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti…
CVE-2023-5852
HIGH 8.8
Chrome Google Chrome

Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti…
CVE-2023-5849
HIGH 8.8
Chrome Google Chrome

Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…
CVE-2023-5482
HIGH 8.8
Chrome Google Chrome

Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTM…
CVE-2023-5728
HIGH · vendor
Mozilla Thunderbird Mozilla Firefox

During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. This vulnerab…
CVE-2023-5724
HIGH 7.5
Mozilla Thunderbird Mozilla Firefox

Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. This vulnerability affects Firefox < 119…
CVE-2023-5472
HIGH 8.8
Chrome Google Chrome

Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…
CVE-2023-5476
HIGH 8.8
Chrome Google Chrome

Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…
CVE-2023-5474
HIGH 8.8
Chrome Google Chrome

Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to engage in specific user interactions to p…
CVE-2023-5218
HIGH 8.8
Chrome Google Chrome

Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…
CVE-2023-44487
HIGH 7.5 KEV
Windows

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the w…
CVE-2023-41772
HIGH · vendor
Windows

Win32k Elevation of Privilege Vulnerability
CVE-2023-41766
HIGH · vendor
Windows

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM