Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-0767
HIGH 8.8
An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. … |
|
CVE-2022-35742
HIGH 7.5
Microsoft Outlook Denial of Service Vulnerability |
|
CVE-2023-2939
HIGH 7.8
Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via craft… |
|
CVE-2023-2936
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2023-2935
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2023-2934
HIGH 8.8
Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
|
CVE-2023-2933
HIGH 8.8
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu… |
|
CVE-2023-2932
HIGH 8.8
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu… |
|
CVE-2023-2931
HIGH 8.8
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu… |
|
CVE-2023-2930
HIGH 8.8
Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
|
CVE-2023-2929
HIGH 8.8
Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2023-2726
HIGH 8.8
Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web ap… |
|
CVE-2023-2725
HIGH 8.8
Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially … |
|
CVE-2023-2724
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2023-2723
HIGH 8.8
Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit h… |
|
CVE-2023-2722
HIGH 8.8
Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
|
CVE-2023-2721
HIGH 8.8
Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
|
CVE-2023-2458
HIGH 8.8
Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who convinced a user to engage in specific UI … |
|
CVE-2023-2457
HIGH 8.8
Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corrupt… |
|
CVE-2023-29335
HIGH 7.5
Microsoft Word Security Feature Bypass Vulnerability |
|
CVE-2023-24953
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2023-29336
Win32k Elevation of Privilege Vulnerability |
|
CVE-2023-29324
HIGH · vendor
Windows MSHTML Platform Security Feature Bypass Vulnerability |
|
CVE-2023-28251
HIGH · vendor
Windows Driver Revocation List Security Feature Bypass Vulnerability |
|
CVE-2023-24949
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-24948
HIGH · vendor
Windows Bluetooth Driver Elevation of Privilege Vulnerability |
|
CVE-2023-24947
HIGH · vendor
Windows Bluetooth Driver Remote Code Execution Vulnerability |
|
CVE-2023-24946
HIGH · vendor
Windows Backup Service Elevation of Privilege Vulnerability |
|
CVE-2023-24945
HIGH · vendor
Windows iSCSI Target Service Information Disclosure Vulnerability |
|
CVE-2023-24944
HIGH · vendor
Windows Bluetooth Driver Information Disclosure Vulnerability |
|
CVE-2023-24942
HIGH · vendor
Remote Procedure Call Runtime Denial of Service Vulnerability |
|
CVE-2023-24940
HIGH · vendor
Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability |
|
CVE-2023-24939
HIGH · vendor
Server for NFS Denial of Service Vulnerability |
|
CVE-2023-24932
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2023-24905
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2023-24902
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2023-24901
HIGH · vendor
Windows NFS Portmapper Information Disclosure Vulnerability |
|
CVE-2023-24900
HIGH · vendor
Windows NTLM Security Support Provider Information Disclosure Vulnerability |
|
CVE-2023-24899
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2023-24898
HIGH · vendor
Windows SMB Denial of Service Vulnerability |
|
CVE-2023-2461
HIGH 8.8
Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interact… |
|
CVE-2023-2460
HIGH 7.1
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a maliciou… |
|
CVE-2023-29007
HIGH 7.0
Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially cra… |
|
CVE-2023-25652
HIGH · vendor
Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding spec… |
|
CVE-2023-2137
HIGH 8.8
Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
|
CVE-2023-2135
HIGH 7.5
Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentia… |
|
CVE-2023-2134
HIGH 8.8
Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via… |
|
CVE-2023-2133
HIGH 8.8
Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via… |
|
CVE-2023-2033
HIGH 8.8
KEV
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2023-28308
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.