Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,679
Actively exploited
303
Publication window
1997-01-01 → 2026-10-20

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,679 entries Windows Clear all
CVE
CVE-2023-4358
HIGH 8.8

Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…

CVE-2023-4357
HIGH 8.8

Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a cr…

CVE-2023-4356
HIGH 8.8

Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to pote…

CVE-2023-4355
HIGH 8.8

Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

CVE-2023-4354
HIGH 8.8

Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit …

CVE-2023-4353
HIGH 8.8

Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…

CVE-2023-4352
HIGH 8.8

Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…

CVE-2023-4351
HIGH 8.8

Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to potentially exploit heap cor…

CVE-2023-4350
MEDIUM 6.5

Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to potentially spoof the contents of th…

CVE-2023-4349
HIGH 8.8

Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafte…

CVE-2023-2312
HIGH 8.8

Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially …

CVE-2023-38898
MEDIUM 5.3

An issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the _asyncio._swap_current_task component. NOTE: this is disputed by th…

CVE-2023-38254
MEDIUM 6.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-38186
HIGH 8.8

Windows Mobile Device Management Elevation of Privilege Vulnerability

CVE-2023-38184
HIGH 7.5

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2023-38172
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-36914
MEDIUM 5.5

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

CVE-2023-36913
MEDIUM 6.5

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2023-36912
HIGH 7.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-36911
CRITICAL 9.8

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2023-36910
CRITICAL 9.8

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2023-36909
MEDIUM 6.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-36908
MEDIUM 6.5

Windows Hyper-V Information Disclosure Vulnerability

CVE-2023-36907
MEDIUM 5.5

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2023-36906
MEDIUM 5.5

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2023-36905
MEDIUM 5.5

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

CVE-2023-36904
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-36903
HIGH 7.8

Windows System Assessment Tool Elevation of Privilege Vulnerability

CVE-2023-36900
HIGH 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-36898
HIGH 7.8

Tablet Windows User Interface Application Core Remote Code Execution Vulnerability

CVE-2023-36897
HIGH 8.1

Visual Studio Tools for Office Runtime Spoofing Vulnerability

CVE-2023-36896
HIGH 7.8

Microsoft Excel Remote Code Execution Vulnerability

CVE-2023-36895
HIGH 7.8

Microsoft Outlook Remote Code Execution Vulnerability

CVE-2023-36893
MEDIUM 6.5

Microsoft Outlook Spoofing Vulnerability

CVE-2023-36889
MEDIUM 5.5

Windows Group Policy Security Feature Bypass Vulnerability

CVE-2023-36882
HIGH 8.8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-36866
HIGH 7.8

Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2023-36865
HIGH 7.8

Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2023-35387
HIGH 8.8

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

CVE-2023-35386
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-35385
CRITICAL 9.8

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2023-35384
MEDIUM 5.4

Windows HTML Platforms Security Feature Bypass Vulnerability

CVE-2023-35383
HIGH 7.5

Microsoft Message Queuing Information Disclosure Vulnerability

CVE-2023-35382
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-35381
HIGH 8.8

Windows Fax Service Remote Code Execution Vulnerability

CVE-2023-35380
HIGH 7.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-35378
HIGH 7.0

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2023-35377
MEDIUM 6.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-35376
MEDIUM 6.5

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2023-35372
HIGH 7.8

Microsoft Office Visio Remote Code Execution Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM