Vulnerabilities

Tracked app vulnerabilities

19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,679
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-20

All CVEs 19,679 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,679 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2023-1017 CRITICAL · vendor Windows 2023-03-14 CERT/CC: CVE-2023-1017 TPM2.0 Module Library Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2023-03-14
CVE-2023-1236 MEDIUM 4.3 2023-03-07 Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML…	MEDIUM 4.3	—		2023-03-07
CVE-2023-1235 MEDIUM 6.3 2023-03-07 Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit he…	MEDIUM 6.3	—		2023-03-07
CVE-2023-1234 MEDIUM 4.3 2023-03-07 Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted H…	MEDIUM 4.3	—		2023-03-07
CVE-2023-1233 MEDIUM 4.3 2023-03-07 Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious exte…	MEDIUM 4.3	—		2023-03-07
CVE-2023-1232 MEDIUM 4.3 2023-03-07 Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive informatio…	MEDIUM 4.3	—		2023-03-07
CVE-2023-1231 MEDIUM 4.3 2023-03-07 Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the …	MEDIUM 4.3	—		2023-03-07
CVE-2023-1230 MEDIUM 4.3 2023-03-07 Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malici…	MEDIUM 4.3	—		2023-03-07
CVE-2023-1229 MEDIUM 4.3 2023-03-07 Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a cr…	MEDIUM 4.3	—		2023-03-07
CVE-2023-1228 MEDIUM 4.3 2023-03-07 Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a…	MEDIUM 4.3	—		2023-03-07
CVE-2023-1227 HIGH 8.8 2023-03-07 Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to…	HIGH 8.8	—		2023-03-07
CVE-2023-1226 MEDIUM 6.5 2023-03-07 Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a c…	MEDIUM 6.5	—		2023-03-07
CVE-2023-1225 MEDIUM 4.3 2023-03-07 Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a craft…	MEDIUM 4.3	—		2023-03-07
CVE-2023-1224 MEDIUM 4.3 2023-03-07 Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a c…	MEDIUM 4.3	—		2023-03-07
CVE-2023-1223 MEDIUM 4.3 2023-03-07 Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafte…	MEDIUM 4.3	—		2023-03-07
CVE-2023-1222 HIGH 8.8 2023-03-07 Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…	HIGH 8.8	—		2023-03-07
CVE-2023-1221 MEDIUM 4.3 2023-03-07 Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious exten…	MEDIUM 4.3	—		2023-03-07
CVE-2023-1220 HIGH 8.8 2023-03-07 Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit h…	HIGH 8.8	—		2023-03-07
CVE-2023-1219 HIGH 8.8 2023-03-07 Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially explo…	HIGH 8.8	—		2023-03-07
CVE-2023-1218 HIGH 8.8 2023-03-07 Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…	HIGH 8.8	—		2023-03-07
CVE-2023-1217 MEDIUM 6.5 2023-03-07 Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process …	MEDIUM 6.5	—		2023-03-07
CVE-2023-1216 HIGH 8.8 2023-03-07 Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to …	HIGH 8.8	—		2023-03-07
CVE-2023-1215 HIGH 8.8 2023-03-07 Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…	HIGH 8.8	—		2023-03-07
CVE-2023-1214 HIGH 8.8 2023-03-07 Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…	HIGH 8.8	—		2023-03-07
CVE-2023-1213 HIGH 8.8 2023-03-07 Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…	HIGH 8.8	—		2023-03-07
CVE-2023-0941 HIGH 8.8 2023-02-22 Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C…	HIGH 8.8	—		2023-02-22
CVE-2023-0933 HIGH 8.8 2023-02-22 Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro…	HIGH 8.8	—		2023-02-22
CVE-2023-0932 HIGH 8.8 2023-02-22 Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in specific UI interact…	HIGH 8.8	—		2023-02-22
CVE-2023-0931 HIGH 8.8 2023-02-22 Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…	HIGH 8.8	—		2023-02-22
CVE-2023-0930 HIGH 8.8 2023-02-22 Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…	HIGH 8.8	—		2023-02-22
CVE-2023-0929 HIGH 8.8 2023-02-22 Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch…	HIGH 8.8	—		2023-02-22
CVE-2023-0928 HIGH 8.8 2023-02-22 Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…	HIGH 8.8	—		2023-02-22
CVE-2023-0927 HIGH 8.8 2023-02-22 Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to po…	HIGH 8.8	—		2023-02-22
CVE-2023-24329 HIGH 7.5 2023-02-17 An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank charac…	HIGH 7.5	—		2023-02-17
CVE-2021-43529 CRITICAL 9.8 Mozilla Thunderbird 2023-02-16 Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3…	CRITICAL 9.8	—	Mozilla Thunderbird	2023-02-16
CVE-2023-21823 HIGH 7.8 KEV Windows 2023-02-14 Windows Graphics Component Remote Code Execution Vulnerability	HIGH 7.8	KEV	Windows	2023-02-14
CVE-2023-23376 HIGH 7.8 KEV Windows 2023-02-14 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	KEV	Windows	2023-02-14
CVE-2023-21822 HIGH 7.8 Windows 2023-02-14 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21820 HIGH 7.4 Windows 2023-02-14 Windows Distributed File System (DFS) Remote Code Execution Vulnerability	HIGH 7.4	—	Windows	2023-02-14
CVE-2023-21819 HIGH 7.5 Windows 2023-02-14 Windows Secure Channel Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21818 HIGH 7.5 Windows 2023-02-14 Windows Secure Channel Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21817 HIGH 7.8 Windows 2023-02-14 Windows Kerberos Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21816 HIGH 7.5 Windows 2023-02-14 Windows Active Directory Domain Services API Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21813 HIGH 7.5 Windows 2023-02-14 Windows Secure Channel Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21812 HIGH 7.8 Windows 2023-02-14 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21811 HIGH 7.5 Windows 2023-02-14 Windows iSCSI Service Denial of Service Vulnerability	HIGH 7.5	—	Windows	2023-02-14
CVE-2023-21805 HIGH 7.8 Windows 2023-02-14 Windows MSHTML Platform Remote Code Execution Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21804 HIGH 7.8 Windows 2023-02-14 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2023-02-14
CVE-2023-21803 CRITICAL 9.8 Windows 2023-02-14 Windows iSCSI Discovery Service Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2023-02-14
CVE-2023-21802 HIGH 7.8 Windows 2023-02-14 Windows Media Remote Code Execution Vulnerability	HIGH 7.8	—	Windows	2023-02-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM