Vulnerabilities
Tracked app vulnerabilities
19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,679
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-32022
HIGH · vendor
Windows Server Service Security Feature Bypass Vulnerability |
|
CVE-2023-32021
HIGH · vendor
Windows SMB Witness Service Security Feature Bypass Vulnerability |
|
CVE-2023-32020
HIGH · vendor
Windows DNS Spoofing Vulnerability |
|
CVE-2023-32019
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2023-32018
HIGH · vendor
Windows Hello Remote Code Execution Vulnerability |
|
CVE-2023-32017
HIGH · vendor
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-32016
HIGH · vendor
Windows Installer Information Disclosure Vulnerability |
|
CVE-2023-32015
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-32014
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-32013
CRITICAL · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2023-32012
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2023-32011
HIGH · vendor
Windows iSCSI Discovery Service Denial of Service Vulnerability |
|
CVE-2023-32010
HIGH · vendor
Windows Bus Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2023-32009
HIGH · vendor
Windows Collaborative Translation Framework Elevation of Privilege Vulnerability |
|
CVE-2023-32008
HIGH · vendor
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
|
CVE-2023-29373
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2023-29372
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-29371
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2023-29370
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-29369
HIGH · vendor
Remote Procedure Call Runtime Denial of Service Vulnerability |
|
CVE-2023-29368
HIGH · vendor
Windows Filtering Platform Elevation of Privilege Vulnerability |
|
CVE-2023-29367
HIGH · vendor
iSCSI Target WMI Provider Remote Code Execution Vulnerability |
|
CVE-2023-29366
HIGH · vendor
Windows Geolocation Service Remote Code Execution Vulnerability |
|
CVE-2023-29365
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-29364
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2023-29363
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-29362
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2023-29361
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2023-29360
Microsoft Streaming Service Elevation of Privilege Vulnerability |
|
CVE-2023-29359
HIGH · vendor
GDI Elevation of Privilege Vulnerability |
|
CVE-2023-29358
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2023-29355
HIGH · vendor
DHCP Server Service Information Disclosure Vulnerability |
|
CVE-2023-29352
HIGH · vendor
Windows Remote Desktop Security Feature Bypass Vulnerability |
|
CVE-2023-29351
HIGH · vendor
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2023-29346
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2023-24938
HIGH · vendor
Windows CryptoAPI Denial of Service Vulnerability |
|
CVE-2023-24937
HIGH · vendor
Windows CryptoAPI Denial of Service Vulnerability |
|
CVE-2023-33595
MEDIUM 5.5
CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c. |
|
CVE-2023-3079
HIGH 8.8
KEV
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2023-32215
HIGH 8.8
Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team repor… |
|
CVE-2023-32213
HIGH 8.8
When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird… |
|
CVE-2023-32212
MEDIUM 4.3
An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderb… |
|
CVE-2023-32211
MEDIUM 6.5
A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. |
|
CVE-2023-32207
HIGH 8.8
A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefo… |
|
CVE-2023-32206
MEDIUM 6.5
An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102… |
|
CVE-2023-32205
MEDIUM 4.3
In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attac… |
|
CVE-2023-28176
HIGH 8.8
Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort… |
|
CVE-2023-28164
MEDIUM 6.5
Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability af… |
|
CVE-2023-28163
MEDIUM 6.5
When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those … |
|
CVE-2023-28162
HIGH 8.8
While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash.… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.