Vulnerabilities
Tracked app vulnerabilities
19,677 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,677
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-4671
CRITICAL 9.6
KEV
Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a … |
|
CVE-2024-27793
HIGH 7.8
The issue was addressed with improved checks. This issue is fixed in iTunes 12.13.2 for Windows. Parsing a file may lead to an unexpected app termination or ar… |
|
CVE-2024-30051
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2024-30050
MEDIUM · vendor
Windows Mark of the Web Security Feature Bypass Vulnerability |
|
CVE-2024-30049
HIGH · vendor
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2024-30040
Windows MSHTML Platform Security Feature Bypass Vulnerability |
|
CVE-2024-30039
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2024-30038
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-30037
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-30036
HIGH · vendor
Windows Deployment Services Information Disclosure Vulnerability |
|
CVE-2024-30035
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2024-30034
HIGH · vendor
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
|
CVE-2024-30033
HIGH · vendor
Windows Search Service Elevation of Privilege Vulnerability |
|
CVE-2024-30032
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2024-30031
HIGH · vendor
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
|
CVE-2024-30029
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30028
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-30027
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2024-30025
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-30024
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30023
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30022
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30021
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30020
HIGH · vendor
Windows Cryptographic Services Remote Code Execution Vulnerability |
|
CVE-2024-30019
HIGH · vendor
DHCP Server Service Denial of Service Vulnerability |
|
CVE-2024-30018
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-30017
HIGH · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-30016
HIGH · vendor
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2024-30015
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30014
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30012
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30011
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-30010
HIGH · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-30009
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30008
HIGH · vendor
Windows DWM Core Library Information Disclosure Vulnerability |
|
CVE-2024-30007
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2024-30006
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-30005
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30004
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30003
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30002
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30001
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-30000
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-29999
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-29998
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-29997
HIGH · vendor
Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
|
CVE-2024-29996
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-29994
HIGH · vendor
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
|
CVE-2024-26238
HIGH · vendor
Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability |
|
CVE-2024-4559
MEDIUM 6.5
Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.