Vulnerabilities
Tracked app vulnerabilities
19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,673
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-7981
MEDIUM 4.3
Inappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromi… |
|
CVE-2024-7980
HIGH 7.8
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a cra… |
|
CVE-2024-7979
HIGH 7.8
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a cra… |
|
CVE-2024-7978
MEDIUM 4.3
Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific U… |
|
CVE-2024-7977
HIGH 7.8
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a mal… |
|
CVE-2024-7976
MEDIUM 4.3
Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromi… |
|
CVE-2024-7975
MEDIUM 4.3
Inappropriate implementation in Permissions in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (… |
|
CVE-2024-7974
HIGH 8.8
Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted C… |
|
CVE-2024-7973
HIGH 8.8
Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file… |
|
CVE-2024-7972
HIGH 8.8
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a c… |
|
CVE-2024-7971
CRITICAL 9.6
KEV
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security s… |
|
CVE-2024-7969
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2024-7968
HIGH 8.8
Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI interactions t… |
|
CVE-2024-7967
HIGH 8.8
Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
|
CVE-2024-7966
HIGH 8.8
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out o… |
|
CVE-2024-7965
HIGH 8.8
KEV
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2024-7964
HIGH 8.8
Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
|
CVE-2024-7592
HIGH · vendor
There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backsla… |
|
CVE-2024-38173
MEDIUM 6.7
Microsoft Outlook Remote Code Execution Vulnerability |
|
CVE-2024-38171
HIGH 7.8
Microsoft PowerPoint Remote Code Execution Vulnerability |
|
CVE-2024-38223
HIGH · vendor
Windows Initial Machine Configuration Elevation of Privilege Vulnerability |
|
CVE-2024-38215
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38214
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2024-38213
Windows Mark of the Web Security Feature Bypass Vulnerability |
|
CVE-2024-38202
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2024-38199
HIGH · vendor
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
|
CVE-2024-38198
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2024-38196
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38193
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2024-38191
HIGH · vendor
Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38187
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38186
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38185
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38184
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-38180
HIGH · vendor
Windows SmartScreen Security Feature Bypass Vulnerability |
|
CVE-2024-38178
Scripting Engine Memory Corruption Vulnerability |
|
CVE-2024-38165
HIGH · vendor
Windows Compressed Folder Tampering Vulnerability |
|
CVE-2024-38163
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2024-38161
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-38160
CRITICAL · vendor
Windows Network Virtualization Remote Code Execution Vulnerability |
|
CVE-2024-38159
CRITICAL · vendor
Windows Network Virtualization Remote Code Execution Vulnerability |
|
CVE-2024-38155
HIGH · vendor
Security Center Broker Information Disclosure Vulnerability |
|
CVE-2024-38154
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-38153
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-38152
HIGH · vendor
Windows OLE Remote Code Execution Vulnerability |
|
CVE-2024-38151
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2024-38150
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2024-38148
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2024-38147
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2024-38146
HIGH · vendor
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.