Vulnerabilities
Tracked app vulnerabilities
19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,679
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-0131
MEDIUM 6.5
Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a … |
|
CVE-2023-0130
MEDIUM 6.5
Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omn… |
|
CVE-2023-0129
HIGH 8.8
Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to po… |
|
CVE-2023-0128
HIGH 8.8
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI in… |
|
CVE-2023-21776
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2023-21774
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21773
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21772
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21771
HIGH · vendor
Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability |
|
CVE-2023-21768
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2023-21767
HIGH · vendor
Windows Overlay Filter Elevation of Privilege Vulnerability |
|
CVE-2023-21766
HIGH · vendor
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2023-21765
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2023-21760
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2023-21759
HIGH · vendor
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability |
|
CVE-2023-21758
HIGH · vendor
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
|
CVE-2023-21757
HIGH · vendor
Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability |
|
CVE-2023-21755
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21754
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21753
HIGH · vendor
Event Tracing for Windows Information Disclosure Vulnerability |
|
CVE-2023-21752
HIGH · vendor
Windows Backup Service Elevation of Privilege Vulnerability |
|
CVE-2023-21750
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21749
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21748
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21747
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21746
HIGH · vendor
Windows NTLM Elevation of Privilege Vulnerability |
|
CVE-2023-21739
HIGH · vendor
Windows Bluetooth Driver Elevation of Privilege Vulnerability |
|
CVE-2023-21733
HIGH · vendor
Windows Bind Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2023-21732
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2023-21730
CRITICAL · vendor
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
|
CVE-2023-21728
HIGH · vendor
Windows Netlogon Denial of Service Vulnerability |
|
CVE-2023-21726
HIGH · vendor
Windows Credential Manager User Interface Elevation of Privilege Vulnerability |
|
CVE-2023-21724
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2023-21712
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-21683
HIGH · vendor
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
|
CVE-2023-21682
HIGH · vendor
Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability |
|
CVE-2023-21681
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2023-21680
HIGH · vendor
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2023-21679
CRITICAL · vendor
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
|
CVE-2023-21678
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2023-21677
HIGH · vendor
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
|
CVE-2023-21676
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2023-21675
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-21674
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
|
CVE-2023-21563
HIGH · vendor
BitLocker Security Feature Bypass Vulnerability |
|
CVE-2023-21561
CRITICAL · vendor
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
|
CVE-2023-21560
HIGH · vendor
Windows Boot Manager Security Feature Bypass Vulnerability |
|
CVE-2023-21559
HIGH · vendor
Windows Cryptographic Information Disclosure Vulnerability |
|
CVE-2023-21558
HIGH · vendor
Windows Error Reporting Service Elevation of Privilege Vulnerability |
|
CVE-2023-21557
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.