Vulnerabilities
Tracked app vulnerabilities
1,721 CVEs affect a tracked app or OS (Critical, Windows). 37 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 1,721
- Actively exploited
- 37
- Publication window
- 2007-08-28 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-5274
CRITICAL 9.6
KEV
Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
|
CVE-2024-4947
CRITICAL 9.6
KEV
Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chr… |
|
CVE-2024-4671
CRITICAL 9.6
KEV
Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a … |
|
CVE-2024-4558
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
|
CVE-2024-3863
CRITICAL 9.8
The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating syst… |
|
CVE-2024-3157
CRITICAL 9.6
Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentiall… |
|
CVE-2024-21408
CRITICAL · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-21407
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-21413
CRITICAL 9.8
KEV
Microsoft Outlook Remote Code Execution Vulnerability |
|
CVE-2024-1284
CRITICAL 9.8
Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2024-1283
CRITICAL 9.8
Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
|
CVE-2024-0808
CRITICAL 9.8
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chro… |
|
CVE-2024-20700
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-20674
CRITICAL · vendor
Windows Kerberos Security Feature Bypass Vulnerability |
|
CVE-2023-35641
CRITICAL · vendor
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability |
|
CVE-2023-35630
CRITICAL · vendor
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability |
|
CVE-2023-35628
CRITICAL · vendor
Windows MSHTML Platform Remote Code Execution Vulnerability |
|
CVE-2023-6345
CRITICAL 9.6
KEV
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
|
CVE-2023-36400
CRITICAL · vendor
Windows HMAC Key Derivation Elevation of Privilege Vulnerability |
|
CVE-2023-36397
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-5730
CRITICAL 9.8
Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume tha… |
|
CVE-2023-41774
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-41773
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-41771
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-41770
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-41769
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-41768
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-41767
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-41765
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-38166
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-36718
CRITICAL · vendor
Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability |
|
CVE-2023-36697
CRITICAL · vendor
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2023-35349
CRITICAL · vendor
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2023-5176
CRITICAL · vendor
Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume tha… |
|
CVE-2023-5174
CRITICAL 9.8
If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free a… |
|
CVE-2023-5168
CRITICAL 9.8
A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable … |
|
CVE-2023-38148
CRITICAL · vendor
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability |
|
CVE-2019-13690
CRITICAL 9.6
Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilege escalation via a … |
|
CVE-2022-48565
CRITICAL 9.8
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoi… |
|
CVE-2023-36911
CRITICAL 9.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2023-36910
CRITICAL 9.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2023-35385
CRITICAL 9.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2022-4924
CRITICAL 9.6
Use after free in WebRTC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
|
CVE-2022-4920
CRITICAL 9.6
Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten… |
|
CVE-2023-33150
CRITICAL 9.6
Microsoft Office Security Feature Bypass Vulnerability |
|
CVE-2023-35367
CRITICAL · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2023-35366
CRITICAL · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2023-35365
CRITICAL · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2023-35352
CRITICAL · vendor
Windows Remote Desktop Security Feature Bypass Vulnerability |
|
CVE-2023-35315
CRITICAL · vendor
Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.