Vulnerabilities
Tracked app vulnerabilities
19,678 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,678
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-6208
HIGH · vendor
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboa… |
|
CVE-2023-6207
HIGH 8.8
Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5. |
|
CVE-2023-6206
MEDIUM · vendor
The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact t… |
|
CVE-2023-6205
MEDIUM · vendor
It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability… |
|
CVE-2023-6204
MEDIUM · vendor
On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on t… |
|
CVE-2023-6112
HIGH 8.8
Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
|
CVE-2023-5997
HIGH 8.8
Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
|
CVE-2023-36041
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2023-36037
HIGH 7.8
Microsoft Excel Security Feature Bypass Vulnerability |
|
CVE-2023-36719
HIGH · vendor
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability |
|
CVE-2023-36705
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2023-36428
HIGH · vendor
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
|
CVE-2023-36427
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2023-36425
HIGH · vendor
Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
|
CVE-2023-36424
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2023-36423
HIGH · vendor
Microsoft Remote Registry Service Remote Code Execution Vulnerability |
|
CVE-2023-36408
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2023-36407
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2023-36406
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2023-36405
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-36404
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2023-36403
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-36402
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-36401
HIGH · vendor
Microsoft Remote Registry Service Remote Code Execution Vulnerability |
|
CVE-2023-36400
CRITICAL · vendor
Windows HMAC Key Derivation Elevation of Privilege Vulnerability |
|
CVE-2023-36399
HIGH · vendor
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2023-36398
HIGH · vendor
Windows NTFS Information Disclosure Vulnerability |
|
CVE-2023-36397
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-36396
HIGH · vendor
Windows Compressed Folder Remote Code Execution Vulnerability |
|
CVE-2023-36395
HIGH · vendor
Windows Deployment Services Denial of Service Vulnerability |
|
CVE-2023-36394
HIGH · vendor
Windows Search Service Elevation of Privilege Vulnerability |
|
CVE-2023-36393
HIGH · vendor
Windows User Interface Application Core Remote Code Execution Vulnerability |
|
CVE-2023-36392
HIGH · vendor
DHCP Server Service Denial of Service Vulnerability |
|
CVE-2023-36047
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2023-36046
HIGH · vendor
Windows Authentication Denial of Service Vulnerability |
|
CVE-2023-36036
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2023-36033
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2023-36028
HIGH · vendor
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-36025
Windows SmartScreen Security Feature Bypass Vulnerability |
|
CVE-2023-36017
HIGH · vendor
Windows Scripting Engine Memory Corruption Vulnerability |
|
CVE-2023-5996
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
|
CVE-2023-31102
HIGH 7.8
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive. |
|
CVE-2023-5859
MEDIUM 4.3
Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted local H… |
|
CVE-2023-5858
MEDIUM 4.3
Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML … |
|
CVE-2023-5857
HIGH 8.8
Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malici… |
|
CVE-2023-5856
HIGH 8.8
Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten… |
|
CVE-2023-5855
HIGH 8.8
Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to pot… |
|
CVE-2023-5854
HIGH 8.8
Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti… |
|
CVE-2023-5853
MEDIUM 4.3
Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromi… |
|
CVE-2023-5852
HIGH 8.8
Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.