Vulnerabilities
Tracked app vulnerabilities
19,678 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,678
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-0333
MEDIUM 5.3
Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious… |
|
CVE-2024-21320
HIGH · vendor
Windows Themes Spoofing Vulnerability |
|
CVE-2024-21316
HIGH · vendor
Windows Server Key Distribution Service Security Feature Bypass |
|
CVE-2024-21314
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2024-21313
HIGH · vendor
Windows TCP/IP Information Disclosure Vulnerability |
|
CVE-2024-21311
HIGH · vendor
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2024-21310
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2024-21309
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-21307
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2024-21306
HIGH · vendor
Microsoft Bluetooth Driver Spoofing Vulnerability |
|
CVE-2024-21305
HIGH · vendor
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability |
|
CVE-2024-20700
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-20699
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-20698
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-20697
HIGH · vendor
Windows libarchive Remote Code Execution Vulnerability |
|
CVE-2024-20696
HIGH · vendor
Windows libarchive Remote Code Execution Vulnerability |
|
CVE-2024-20694
HIGH · vendor
Windows CoreMessaging Information Disclosure Vulnerability |
|
CVE-2024-20692
HIGH · vendor
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
|
CVE-2024-20691
HIGH · vendor
Windows Themes Information Disclosure Vulnerability |
|
CVE-2024-20690
HIGH · vendor
Windows Nearby Sharing Spoofing Vulnerability |
|
CVE-2024-20687
HIGH · vendor
Microsoft AllJoyn API Denial of Service Vulnerability |
|
CVE-2024-20686
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-20683
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-20682
HIGH · vendor
Windows Cryptographic Services Remote Code Execution Vulnerability |
|
CVE-2024-20681
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2024-20680
HIGH · vendor
Windows Message Queuing Client (MSMQC) Information Disclosure |
|
CVE-2024-20674
CRITICAL · vendor
Windows Kerberos Security Feature Bypass Vulnerability |
|
CVE-2024-20666
HIGH · vendor
BitLocker Security Feature Bypass Vulnerability |
|
CVE-2024-20664
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2024-20663
HIGH · vendor
Windows Message Queuing Client (MSMQC) Information Disclosure |
|
CVE-2024-20662
HIGH · vendor
Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability |
|
CVE-2024-20661
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2024-20660
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2024-20658
HIGH · vendor
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2024-20657
HIGH · vendor
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2024-20655
HIGH · vendor
Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability |
|
CVE-2024-20654
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-20653
HIGH · vendor
Microsoft Common Log File System Elevation of Privilege Vulnerability |
|
CVE-2024-20652
HIGH · vendor
Windows HTML Platforms Security Feature Bypass Vulnerability |
|
CVE-2024-0225
HIGH 8.8
Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2024-0224
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
|
CVE-2024-0223
HIGH 8.8
Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
|
CVE-2024-0222
HIGH 8.8
Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap… |
|
CVE-2023-7024
HIGH 8.8
KEV
Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
|
CVE-2023-3742
MEDIUM 6.8
Insufficient policy enforcement in ADB in Google Chrome on ChromeOS prior to 114.0.5735.90 allowed a local attacker to bypass device policy restrictions via ph… |
|
CVE-2023-6864
HIGH · vendor
Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume tha… |
|
CVE-2023-6863
HIGH · vendor
The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnera… |
|
CVE-2023-6862
HIGH 8.8
A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR < 1… |
|
CVE-2023-6861
HIGH 8.8
The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR < 115.6… |
|
CVE-2023-6860
MEDIUM · vendor
The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox. This vulnerability affe… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.