Vulnerabilities

Tracked app vulnerabilities

19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,679
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-20

All CVEs 19,679 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,679 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2023-24953 HIGH 7.8 2023-05-09 Microsoft Excel Remote Code Execution Vulnerability	HIGH 7.8	—		2023-05-09
CVE-2023-29336 HIGH · vendor KEV Windows 2023-05-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2023-05-09
CVE-2023-29325 CRITICAL · vendor Windows 2023-05-09 Windows OLE Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-05-09
CVE-2023-29324 HIGH · vendor Windows 2023-05-09 Windows MSHTML Platform Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-28283 CRITICAL · vendor Windows 2023-05-09 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-05-09
CVE-2023-28251 HIGH · vendor Windows 2023-05-09 Windows Driver Revocation List Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24949 HIGH · vendor Windows 2023-05-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24948 HIGH · vendor Windows 2023-05-09 Windows Bluetooth Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24947 HIGH · vendor Windows 2023-05-09 Windows Bluetooth Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24946 HIGH · vendor Windows 2023-05-09 Windows Backup Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24945 HIGH · vendor Windows 2023-05-09 Windows iSCSI Target Service Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24944 HIGH · vendor Windows 2023-05-09 Windows Bluetooth Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24943 CRITICAL · vendor Windows 2023-05-09 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-05-09
CVE-2023-24942 HIGH · vendor Windows 2023-05-09 Remote Procedure Call Runtime Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24941 CRITICAL · vendor Windows 2023-05-09 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-05-09
CVE-2023-24940 HIGH · vendor Windows 2023-05-09 Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24939 HIGH · vendor Windows 2023-05-09 Server for NFS Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24932 HIGH · vendor Windows 2023-05-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24905 HIGH · vendor Windows 2023-05-09 Remote Desktop Client Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24903 CRITICAL · vendor Windows 2023-05-09 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-05-09
CVE-2023-24902 HIGH · vendor Windows 2023-05-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24901 HIGH · vendor Windows 2023-05-09 Windows NFS Portmapper Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24900 HIGH · vendor Windows 2023-05-09 Windows NTLM Security Support Provider Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24899 HIGH · vendor Windows 2023-05-09 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-24898 HIGH · vendor Windows 2023-05-09 Windows SMB Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-05-09
CVE-2023-2468 MEDIUM 4.3 2023-05-03 Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to …	MEDIUM 4.3	—		2023-05-03
CVE-2023-2467 MEDIUM 4.3 2023-05-03 Inappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to bypass permissions restrictions via a c…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2466 MEDIUM 4.3 2023-05-03 Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to spoof the contents of the security UI via a crafte…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2465 MEDIUM 4.3 2023-05-03 Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chro…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2464 MEDIUM 4.3 2023-05-03 Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extens…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2463 MEDIUM 4.3 2023-05-03 Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnib…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2462 MEDIUM 4.3 2023-05-03 Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page…	MEDIUM 4.3	—		2023-05-03
CVE-2023-2461 HIGH 8.8 2023-05-03 Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interact…	HIGH 8.8	—		2023-05-03
CVE-2023-2460 HIGH 7.1 2023-05-03 Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a maliciou…	HIGH 7.1	—		2023-05-03
CVE-2023-2459 MEDIUM 6.5 2023-05-03 Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML …	MEDIUM 6.5	—		2023-05-03
CVE-2023-29007 HIGH · vendor Git 2023-04-25 Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially cra…	HIGH · vendor	—	Git	2023-04-25
CVE-2023-25652 HIGH · vendor Git 2023-04-25 Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding spec…	HIGH · vendor	—	Git	2023-04-25
CVE-2023-2137 HIGH 8.8 2023-04-19 Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…	HIGH 8.8	—		2023-04-19
CVE-2023-2136 CRITICAL 9.6 KEV Android 2023-04-19 Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a s…	CRITICAL 9.6	KEV	Android	2023-04-19
CVE-2023-2135 HIGH 7.5 2023-04-19 Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentia…	HIGH 7.5	—		2023-04-19
CVE-2023-2134 HIGH 8.8 2023-04-19 Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via…	HIGH 8.8	—		2023-04-19
CVE-2023-2133 HIGH 8.8 2023-04-19 Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via…	HIGH 8.8	—		2023-04-19
CVE-2023-27043 MEDIUM · vendor macOS 2023-04-19 The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is ident…	MEDIUM · vendor	—	macOS	2023-04-19
CVE-2023-2033 HIGH 8.8 KEV 2023-04-14 Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…	HIGH 8.8	KEV		2023-04-14
CVE-2023-28308 HIGH · vendor Windows 2023-04-11 Windows DNS Server Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-04-11
CVE-2023-28307 HIGH · vendor Windows 2023-04-11 Windows DNS Server Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-04-11
CVE-2023-28306 HIGH · vendor Windows 2023-04-11 Windows DNS Server Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-04-11
CVE-2023-28305 HIGH · vendor Windows 2023-04-11 Windows DNS Server Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-04-11
CVE-2023-28302 HIGH · vendor Windows 2023-04-11 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-04-11
CVE-2023-28298 HIGH · vendor Windows 2023-04-11 Windows Kernel Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-04-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM