Vulnerabilities
Tracked app vulnerabilities
19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,679
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-28297
HIGH · vendor
Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability |
|
CVE-2023-28293
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-28278
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2023-28277
HIGH · vendor
Windows DNS Server Information Disclosure Vulnerability |
|
CVE-2023-28276
HIGH · vendor
Windows Group Policy Security Feature Bypass Vulnerability |
|
CVE-2023-28275
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-28274
HIGH · vendor
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2023-28273
HIGH · vendor
Windows Clip Service Elevation of Privilege Vulnerability |
|
CVE-2023-28272
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-28271
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2023-28270
HIGH · vendor
Windows Lock Screen Security Feature Bypass Vulnerability |
|
CVE-2023-28269
HIGH · vendor
Windows Boot Manager Security Feature Bypass Vulnerability |
|
CVE-2023-28268
HIGH · vendor
Netlogon RPC Elevation of Privilege Vulnerability |
|
CVE-2023-28267
HIGH · vendor
Remote Desktop Protocol Client Information Disclosure Vulnerability |
|
CVE-2023-28266
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2023-28256
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2023-28255
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2023-28254
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2023-28253
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2023-28252
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2023-28250
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-28249
HIGH · vendor
Windows Boot Manager Security Feature Bypass Vulnerability |
|
CVE-2023-28248
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-28247
HIGH · vendor
Windows Network File System Information Disclosure Vulnerability |
|
CVE-2023-28246
HIGH · vendor
Windows Registry Elevation of Privilege Vulnerability |
|
CVE-2023-28244
HIGH · vendor
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2023-28243
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-28241
HIGH · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
|
CVE-2023-28240
HIGH · vendor
Windows Network Load Balancing Remote Code Execution Vulnerability |
|
CVE-2023-28238
HIGH · vendor
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
|
CVE-2023-28237
HIGH · vendor
Windows Kernel Remote Code Execution Vulnerability |
|
CVE-2023-28236
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-28235
HIGH · vendor
Windows Lock Screen Security Feature Bypass Vulnerability |
|
CVE-2023-28234
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2023-28233
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2023-28232
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-28231
CRITICAL · vendor
DHCP Server Service Remote Code Execution Vulnerability |
|
CVE-2023-28229
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
|
CVE-2023-28228
HIGH · vendor
Windows Spoofing Vulnerability |
|
CVE-2023-28227
HIGH · vendor
Windows Bluetooth Driver Remote Code Execution Vulnerability |
|
CVE-2023-28226
HIGH · vendor
Windows Enroll Engine Security Feature Bypass Vulnerability |
|
CVE-2023-28225
HIGH · vendor
Windows NTLM Elevation of Privilege Vulnerability |
|
CVE-2023-28224
HIGH · vendor
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
|
CVE-2023-28223
HIGH · vendor
Windows Domain Name Service Remote Code Execution Vulnerability |
|
CVE-2023-28222
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-28221
HIGH · vendor
Windows Error Reporting Service Elevation of Privilege Vulnerability |
|
CVE-2023-28220
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-28219
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-28218
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2023-28217
HIGH · vendor
Windows Network Address Translation (NAT) Denial of Service Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.