Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-24864
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability |
|
CVE-2023-24863
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
|
CVE-2023-24862
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2023-24861
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2023-24859
HIGH · vendor
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
|
CVE-2023-24858
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
|
CVE-2023-24857
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
|
CVE-2023-24856
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
|
CVE-2023-23423
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-23422
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-23421
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-23420
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-23419
HIGH · vendor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2023-23418
HIGH · vendor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2023-23417
HIGH · vendor
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2023-23414
HIGH · vendor
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
|
CVE-2023-23413
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-23412
HIGH · vendor
Windows Accounts Picture Elevation of Privilege Vulnerability |
|
CVE-2023-23410
HIGH · vendor
Windows HTTP.sys Elevation of Privilege Vulnerability |
|
CVE-2023-23409
HIGH · vendor
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability |
|
CVE-2023-23407
HIGH · vendor
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
|
CVE-2023-23406
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-23405
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2023-23403
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-23402
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-23401
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-23400
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2023-23394
HIGH · vendor
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability |
|
CVE-2023-23393
HIGH · vendor
Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability |
|
CVE-2023-23388
HIGH · vendor
Windows Bluetooth Driver Elevation of Privilege Vulnerability |
|
CVE-2023-23385
HIGH · vendor
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
|
CVE-2023-1227
HIGH 8.8
Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to… |
|
CVE-2023-1222
HIGH 8.8
Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
|
CVE-2023-1220
HIGH 8.8
Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit h… |
|
CVE-2023-1219
HIGH 8.8
Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially explo… |
|
CVE-2023-1218
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
|
CVE-2023-1216
HIGH 8.8
Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to … |
|
CVE-2023-1215
HIGH 8.8
Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2023-1214
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2023-1213
HIGH 8.8
Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
|
CVE-2023-0941
HIGH 8.8
Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
|
CVE-2023-0933
HIGH 8.8
Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro… |
|
CVE-2023-0932
HIGH 8.8
Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in specific UI interact… |
|
CVE-2023-0931
HIGH 8.8
Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
|
CVE-2023-0930
HIGH 8.8
Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
|
CVE-2023-0929
HIGH 8.8
Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2023-0928
HIGH 8.8
Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
|
CVE-2023-0927
HIGH 8.8
Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to po… |
|
CVE-2023-24329
HIGH 7.5
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank charac… |
|
CVE-2023-21823
Windows Graphics Component Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.