Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-3214
HIGH 8.8
Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
|
CVE-2023-32022
HIGH · vendor
Windows Server Service Security Feature Bypass Vulnerability |
|
CVE-2023-32021
HIGH · vendor
Windows SMB Witness Service Security Feature Bypass Vulnerability |
|
CVE-2023-32020
HIGH · vendor
Windows DNS Spoofing Vulnerability |
|
CVE-2023-32019
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2023-32018
HIGH · vendor
Windows Hello Remote Code Execution Vulnerability |
|
CVE-2023-32017
HIGH · vendor
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-32016
HIGH · vendor
Windows Installer Information Disclosure Vulnerability |
|
CVE-2023-32012
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2023-32011
HIGH · vendor
Windows iSCSI Discovery Service Denial of Service Vulnerability |
|
CVE-2023-32010
HIGH · vendor
Windows Bus Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2023-32009
HIGH · vendor
Windows Collaborative Translation Framework Elevation of Privilege Vulnerability |
|
CVE-2023-32008
HIGH · vendor
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
|
CVE-2023-29373
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2023-29372
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-29371
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2023-29370
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-29369
HIGH · vendor
Remote Procedure Call Runtime Denial of Service Vulnerability |
|
CVE-2023-29368
HIGH · vendor
Windows Filtering Platform Elevation of Privilege Vulnerability |
|
CVE-2023-29367
HIGH · vendor
iSCSI Target WMI Provider Remote Code Execution Vulnerability |
|
CVE-2023-29366
HIGH · vendor
Windows Geolocation Service Remote Code Execution Vulnerability |
|
CVE-2023-29365
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-29364
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2023-29362
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2023-29361
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2023-29360
Microsoft Streaming Service Elevation of Privilege Vulnerability |
|
CVE-2023-29359
HIGH · vendor
GDI Elevation of Privilege Vulnerability |
|
CVE-2023-29358
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2023-29355
HIGH · vendor
DHCP Server Service Information Disclosure Vulnerability |
|
CVE-2023-29352
HIGH · vendor
Windows Remote Desktop Security Feature Bypass Vulnerability |
|
CVE-2023-29351
HIGH · vendor
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2023-29346
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2023-24938
HIGH · vendor
Windows CryptoAPI Denial of Service Vulnerability |
|
CVE-2023-24937
HIGH · vendor
Windows CryptoAPI Denial of Service Vulnerability |
|
CVE-2023-3079
HIGH 8.8
KEV
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2023-32215
HIGH 8.8
Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team repor… |
|
CVE-2023-32213
HIGH 8.8
When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird… |
|
CVE-2023-32207
HIGH 8.8
A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefo… |
|
CVE-2023-28176
HIGH 8.8
Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort… |
|
CVE-2023-28162
HIGH 8.8
While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash.… |
|
CVE-2023-25746
HIGH 8.8
Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these c… |
|
CVE-2023-25744
HIGH 8.8
Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effor… |
|
CVE-2023-25739
HIGH 8.8
Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-free in <code>ScriptLoadContext</code>. Th… |
|
CVE-2023-25737
HIGH 8.8
An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior. This vulnerability affects Firefox < 110, Th… |
|
CVE-2023-25735
HIGH 8.8
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-… |
|
CVE-2023-25734
HIGH 8.1
After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network … |
|
CVE-2023-25732
HIGH 8.8
When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not correctly calculated potentially leading … |
|
CVE-2023-25731
HIGH 8.8
Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in … |
|
CVE-2023-25729
HIGH 8.8
Permission prompts for opening external schemes were only shown for <code>ContentPrincipals</code> resulting in extensions being able to open them without user… |
|
CVE-2023-23605
HIGH 8.8
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6. Some of these bugs showed evidence of… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.