Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,673
Actively exploited
303
Publication window
1997-01-01 → 2026-10-20
All CVEs 19,673 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,673 entries Windows Clear all
CVE
CVE-2024-38145
HIGH · vendor
Windows

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVE-2024-38144
HIGH · vendor
Windows

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38143
HIGH · vendor
Windows

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
CVE-2024-38142
HIGH · vendor
Windows

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-38141
HIGH · vendor
Windows

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2024-38140
CRITICAL · vendor
Windows

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2024-38138
HIGH · vendor
Windows

Windows Deployment Services Remote Code Execution Vulnerability
CVE-2024-38137
HIGH · vendor
Windows

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
CVE-2024-38136
HIGH · vendor
Windows

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
CVE-2024-38135
HIGH · vendor
Windows

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2024-38134
HIGH · vendor
Windows

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38133
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-38132
HIGH · vendor
Windows

Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2024-38131
HIGH · vendor
Windows

Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
CVE-2024-38130
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38128
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38127
HIGH · vendor
Windows

Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2024-38126
HIGH · vendor
Windows

Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2024-38125
HIGH · vendor
Windows

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38123
HIGH · vendor
Windows

Windows Bluetooth Driver Information Disclosure Vulnerability
CVE-2024-38122
HIGH · vendor
Windows

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
CVE-2024-38121
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38120
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-38118
HIGH · vendor
Windows

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
CVE-2024-38117
HIGH · vendor
Windows

NTFS Elevation of Privilege Vulnerability
CVE-2024-38116
HIGH · vendor
Windows

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVE-2024-38115
HIGH · vendor
Windows

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVE-2024-38114
HIGH · vendor
Windows

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVE-2024-38107
HIGH · vendor KEV
Windows

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
CVE-2024-38106
HIGH · vendor KEV
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-38063
CRITICAL · vendor
Windows

Windows TCP/IP Remote Code Execution Vulnerability
CVE-2024-37968
HIGH · vendor
Windows

Windows DNS Spoofing Vulnerability
CVE-2024-29995
HIGH · vendor
Windows

Windows Kerberos Elevation of Privilege Vulnerability
CVE-2024-21302
HIGH · vendor
Windows

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-7550
HIGH 8.8
Chrome Google Chrome

Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…
CVE-2024-7536
HIGH 8.8
Chrome Google Chrome

Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C…
CVE-2024-7535
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …
CVE-2024-7534
HIGH 8.8
Chrome Google Chrome

Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…
CVE-2024-7533
HIGH 8.8
Chrome Google Chrome

Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…
CVE-2024-7532
HIGH 8.8
Chrome Google Chrome

Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM…
CVE-2024-7005
MEDIUM 4.3
Chrome Google Chrome

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in…
CVE-2024-7004
MEDIUM 4.3
Chrome Google Chrome

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in…
CVE-2024-7003
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures …
CVE-2024-7001
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures t…
CVE-2024-7000
HIGH 8.8
Chrome Google Chrome

Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially e…
CVE-2024-6999
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures …
CVE-2024-6998
HIGH 8.8
Chrome Google Chrome

Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to po…
CVE-2024-6997
HIGH 8.8
Chrome Google Chrome

Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially …
CVE-2024-6996
LOW 3.1
Chrome Google Chrome

Race in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing …
CVE-2024-6995
MEDIUM 4.7
Chrome Google Chrome

Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in speci…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM