Vulnerabilities
Tracked app vulnerabilities
19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,673
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-9954
HIGH 8.8
Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2024-44157
MEDIUM 5.5
A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Par… |
|
CVE-2024-9859
HIGH 8.8
Type confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium s… |
|
CVE-2024-9680
CRITICAL 9.8
KEV
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner… |
|
CVE-2024-9603
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2024-9602
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chro… |
|
CVE-2024-43504
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-6197
HIGH · vendor
Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str |
|
CVE-2024-43615
HIGH · vendor
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
|
CVE-2024-43611
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-43608
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-43607
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-43599
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2024-43593
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-43592
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-43589
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-43585
HIGH · vendor
Code Integrity Guard Security Feature Bypass Vulnerability |
|
CVE-2024-43584
HIGH · vendor
Windows Scripting Engine Security Feature Bypass Vulnerability |
|
CVE-2024-43583
HIGH · vendor
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2024-43582
CRITICAL · vendor
Remote Desktop Protocol Server Remote Code Execution Vulnerability |
|
CVE-2024-43581
HIGH · vendor
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
|
CVE-2024-43575
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-43574
HIGH · vendor
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
|
CVE-2024-43573
Windows MSHTML Platform Spoofing Vulnerability |
|
CVE-2024-43572
Microsoft Management Console Remote Code Execution Vulnerability |
|
CVE-2024-43571
HIGH · vendor
Sudo for Windows Spoofing Vulnerability |
|
CVE-2024-43570
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-43567
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-43565
HIGH · vendor
Windows Network Address Translation (NAT) Denial of Service Vulnerability |
|
CVE-2024-43564
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-43563
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2024-43562
HIGH · vendor
Windows Network Address Translation (NAT) Denial of Service Vulnerability |
|
CVE-2024-43561
HIGH · vendor
Windows Mobile Broadband Driver Denial of Service Vulnerability |
|
CVE-2024-43560
HIGH · vendor
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43559
HIGH · vendor
Windows Mobile Broadband Driver Denial of Service Vulnerability |
|
CVE-2024-43558
HIGH · vendor
Windows Mobile Broadband Driver Denial of Service Vulnerability |
|
CVE-2024-43557
HIGH · vendor
Windows Mobile Broadband Driver Denial of Service Vulnerability |
|
CVE-2024-43556
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2024-43555
HIGH · vendor
Windows Mobile Broadband Driver Denial of Service Vulnerability |
|
CVE-2024-43554
HIGH · vendor
Windows Kernel-Mode Driver Information Disclosure Vulnerability |
|
CVE-2024-43553
HIGH · vendor
NT OS Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-43552
HIGH · vendor
Windows Shell Remote Code Execution Vulnerability |
|
CVE-2024-43551
HIGH · vendor
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2024-43550
HIGH · vendor
Windows Secure Channel Spoofing Vulnerability |
|
CVE-2024-43549
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-43547
HIGH · vendor
Windows Kerberos Information Disclosure Vulnerability |
|
CVE-2024-43546
HIGH · vendor
Windows Cryptographic Information Disclosure Vulnerability |
|
CVE-2024-43545
HIGH · vendor
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
|
CVE-2024-43544
HIGH · vendor
Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability |
|
CVE-2024-43543
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.