Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11
All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2023-33173
HIGH · vendor
Windows

Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33172
HIGH · vendor
Windows

Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33169
HIGH · vendor
Windows

Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33168
HIGH · vendor
Windows

Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33167
HIGH · vendor
Windows

Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33166
HIGH · vendor
Windows

Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33164
HIGH · vendor
Windows

Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33163
HIGH · vendor
Windows

Windows Network Load Balancing Remote Code Execution Vulnerability
CVE-2023-33155
HIGH · vendor
Windows

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-33154
HIGH · vendor
Windows

Windows Partition Management Driver Elevation of Privilege Vulnerability
CVE-2023-32085
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-32084
HIGH · vendor
Windows

HTTP.sys Denial of Service Vulnerability
CVE-2023-32083
HIGH · vendor
Windows

Microsoft Failover Cluster Information Disclosure Vulnerability
CVE-2023-32056
HIGH · vendor
Windows

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
CVE-2023-32055
HIGH · vendor
Windows

Active Template Library Elevation of Privilege Vulnerability
CVE-2023-32054
HIGH · vendor
Windows

Volume Shadow Copy Elevation of Privilege Vulnerability
CVE-2023-32053
HIGH · vendor
Windows

Windows Installer Elevation of Privilege Vulnerability
CVE-2023-32049
HIGH · vendor KEV
Windows

Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-32046
HIGH · vendor KEV
Windows

Windows MSHTML Platform Elevation of Privilege Vulnerability
CVE-2023-32045
HIGH · vendor
Windows

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-32044
HIGH · vendor
Windows

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-32043
HIGH · vendor
Windows

Windows Remote Desktop Security Feature Bypass Vulnerability
CVE-2023-32042
HIGH · vendor
Windows

OLE Automation Information Disclosure Vulnerability
CVE-2023-32041
HIGH · vendor
Windows

Windows Update Orchestrator Service Information Disclosure Vulnerability
CVE-2023-32040
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-32039
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-32038
HIGH · vendor
Windows

Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2023-32037
HIGH · vendor
Windows

Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability
CVE-2023-32035
HIGH · vendor
Windows

Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-32034
HIGH · vendor
Windows

Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-32033
HIGH · vendor
Windows

Microsoft Failover Cluster Remote Code Execution Vulnerability
CVE-2023-21756
HIGH · vendor
Windows

Windows Win32k Elevation of Privilege Vulnerability
CVE-2023-21526
HIGH · vendor
Windows

Windows Netlogon Information Disclosure Vulnerability
CVE-2023-37211
HIGH 8.8
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume t…
CVE-2023-37208
HIGH 7.8
Mozilla Thunderbird Mozilla Firefox

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < …
CVE-2023-37202
HIGH 8.8
Mozilla Thunderbird Mozilla Firefox

Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-…
CVE-2023-37201
HIGH 8.8
Mozilla Thunderbird Mozilla Firefox

An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR…
CVE-2023-3422
HIGH 8.8
Chrome Google Chrome

Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to install a malicious extension to potentially …
CVE-2023-3421
HIGH 8.8
Chrome Google Chrome

Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…
CVE-2023-3420
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…
CVE-2023-36632
HIGH 7.5
Python 3.12 Python 3.13 Python 3.14

The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling …
CVE-2023-32353
HIGH 7.8
iTunes

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to elevate privileges.
CVE-2023-32351
HIGH 7.8
iTunes

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to gain elevated privileges.
CVE-2023-32214
HIGH 7.5
Mozilla Thunderbird Mozilla Firefox

Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attack only affects Windows. Other operating…
CVE-2023-33133
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33131
HIGH 8.8
Microsoft Office Microsoft Outlook Office

Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-32029
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-3217
HIGH 8.8
Chrome Google Chrome

Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…
CVE-2023-3216
HIGH 8.8
Chrome Google Chrome

Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…
CVE-2023-3215
HIGH 8.8
Chrome Google Chrome

Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM