Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-23376
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2023-21822
HIGH 7.8
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2023-21820
HIGH 7.4
Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
|
CVE-2023-21819
HIGH 7.5
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2023-21818
HIGH 7.5
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2023-21817
HIGH 7.8
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2023-21816
HIGH 7.5
Windows Active Directory Domain Services API Denial of Service Vulnerability |
|
CVE-2023-21813
HIGH 7.5
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2023-21812
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2023-21811
HIGH 7.5
Windows iSCSI Service Denial of Service Vulnerability |
|
CVE-2023-21805
HIGH 7.8
Windows MSHTML Platform Remote Code Execution Vulnerability |
|
CVE-2023-21804
HIGH 7.8
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2023-21802
HIGH 7.8
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-21801
HIGH 7.8
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-21799
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-21798
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2023-21797
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2023-21702
HIGH 7.5
Windows iSCSI Service Denial of Service Vulnerability |
|
CVE-2023-21701
HIGH 7.5
Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability |
|
CVE-2023-21700
HIGH 7.5
Windows iSCSI Discovery Service Denial of Service Vulnerability |
|
CVE-2023-21695
HIGH 7.5
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-21691
HIGH 7.5
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability |
|
CVE-2023-21688
HIGH 7.8
NT OS Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21686
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-21685
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-21684
HIGH 8.8
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-0705
HIGH 7.5
Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition to potentially exploit heap corruption … |
|
CVE-2023-0703
HIGH 8.8
Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to pote… |
|
CVE-2023-0702
HIGH 8.8
Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to… |
|
CVE-2023-0701
HIGH 8.8
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to p… |
|
CVE-2023-0699
HIGH 8.8
Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page and brow… |
|
CVE-2023-0698
HIGH 8.8
Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.… |
|
CVE-2023-0696
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2023-0474
HIGH 8.8
Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
|
CVE-2023-0473
HIGH 8.8
Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
|
CVE-2023-0472
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2023-0471
HIGH 8.8
Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
|
CVE-2023-21608
HIGH 7.8
KEV
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerabil… |
|
CVE-2022-23521
HIGH · vendor
Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `… |
|
CVE-2023-21748
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-0138
HIGH 8.8
Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
|
CVE-2023-0137
HIGH 8.8
Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious exte… |
|
CVE-2023-0136
HIGH 8.8
Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI… |
|
CVE-2023-0135
HIGH 8.8
Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit… |
|
CVE-2023-0134
HIGH 8.8
Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit… |
|
CVE-2023-0129
HIGH 8.8
Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to po… |
|
CVE-2023-0128
HIGH 8.8
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI in… |
|
CVE-2023-21776
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2023-21774
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21773
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.