Vulnerabilities
Tracked app vulnerabilities
19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,679
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-21801
HIGH 7.8
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-21799
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-21798
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2023-21797
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2023-21716
CRITICAL 9.8
Microsoft Word Remote Code Execution Vulnerability |
|
CVE-2023-21714
MEDIUM 5.5
Microsoft Office Information Disclosure Vulnerability |
|
CVE-2023-21702
HIGH 7.5
Windows iSCSI Service Denial of Service Vulnerability |
|
CVE-2023-21701
HIGH 7.5
Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability |
|
CVE-2023-21700
HIGH 7.5
Windows iSCSI Discovery Service Denial of Service Vulnerability |
|
CVE-2023-21699
MEDIUM 5.3
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
|
CVE-2023-21697
MEDIUM 6.2
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
|
CVE-2023-21695
HIGH 7.5
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-21694
MEDIUM 6.8
Windows Fax Service Remote Code Execution Vulnerability |
|
CVE-2023-21693
MEDIUM 5.7
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
|
CVE-2023-21692
CRITICAL 9.8
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-21691
HIGH 7.5
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability |
|
CVE-2023-21690
CRITICAL 9.8
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-21689
CRITICAL 9.8
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-21688
HIGH 7.8
NT OS Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21687
MEDIUM 5.5
HTTP.sys Information Disclosure Vulnerability |
|
CVE-2023-21686
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-21685
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-21684
HIGH 8.8
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-0705
HIGH 7.5
Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition to potentially exploit heap corruption … |
|
CVE-2023-0704
MEDIUM 6.5
Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings v… |
|
CVE-2023-0703
HIGH 8.8
Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to pote… |
|
CVE-2023-0702
HIGH 8.8
Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to… |
|
CVE-2023-0701
HIGH 8.8
Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to p… |
|
CVE-2023-0700
MEDIUM 6.5
Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox (UR… |
|
CVE-2023-0699
HIGH 8.8
Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page and brow… |
|
CVE-2023-0698
HIGH 8.8
Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.… |
|
CVE-2023-0697
MEDIUM 6.5
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the secu… |
|
CVE-2023-0696
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2023-0474
HIGH 8.8
Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
|
CVE-2023-0473
HIGH 8.8
Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
|
CVE-2023-0472
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2023-0471
HIGH 8.8
Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
|
CVE-2023-21608
HIGH 7.8
KEV
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerabil… |
|
CVE-2022-41903
CRITICAL · vendor
Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also ex… |
|
CVE-2022-23521
HIGH · vendor
Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `… |
|
CVE-2023-0141
MEDIUM 4.3
Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C… |
|
CVE-2023-0140
MEDIUM 6.5
Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restricti… |
|
CVE-2023-0139
MEDIUM 6.5
Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restric… |
|
CVE-2023-0138
HIGH 8.8
Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
|
CVE-2023-0137
HIGH 8.8
Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious exte… |
|
CVE-2023-0136
HIGH 8.8
Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI… |
|
CVE-2023-0135
HIGH 8.8
Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit… |
|
CVE-2023-0134
HIGH 8.8
Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit… |
|
CVE-2023-0133
MEDIUM 6.5
Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permis… |
|
CVE-2023-0132
MEDIUM 6.5
Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a per… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.