Vulnerabilities
Tracked app vulnerabilities
1,721 CVEs affect a tracked app or OS (Critical, Windows). 37 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 1,721
- Actively exploited
- 37
- Publication window
- 2007-08-28 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-35297
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-32057
CRITICAL · vendor
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2023-34417
CRITICAL 9.8
Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
|
CVE-2023-34416
CRITICAL 9.8
Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume t… |
|
CVE-2023-29542
CRITICAL 9.8
A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .downlo… |
|
CVE-2023-29531
CRITICAL 9.8
An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. *This bug onl… |
|
CVE-2023-32015
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-32014
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-32013
CRITICAL · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2023-29363
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-29325
CRITICAL · vendor
Windows OLE Remote Code Execution Vulnerability |
|
CVE-2023-28283
CRITICAL · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2023-24943
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-24941
CRITICAL · vendor
Windows Network File System Remote Code Execution Vulnerability |
|
CVE-2023-24903
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2023-2136
Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
|
CVE-2023-28250
CRITICAL · vendor
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
|
CVE-2023-28232
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-28231
CRITICAL · vendor
DHCP Server Service Remote Code Execution Vulnerability |
|
CVE-2023-28220
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-28219
CRITICAL · vendor
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-21554
CRITICAL · vendor
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2023-1529
CRITICAL 9.8
Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious… |
|
CVE-2023-23397
CRITICAL 9.8
KEV
Microsoft Outlook Elevation of Privilege Vulnerability |
|
CVE-2023-23416
CRITICAL · vendor
Windows Cryptographic Services Remote Code Execution Vulnerability |
|
CVE-2023-23415
CRITICAL · vendor
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability |
|
CVE-2023-23411
CRITICAL · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2023-23404
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-23392
CRITICAL · vendor
HTTP Protocol Stack Remote Code Execution Vulnerability |
|
CVE-2023-21708
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2023-1018
CRITICAL · vendor
CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability |
|
CVE-2023-1017
CRITICAL · vendor
CERT/CC: CVE-2023-1017 TPM2.0 Module Library Elevation of Privilege Vulnerability |
|
CVE-2021-43529
CRITICAL 9.8
Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3… |
|
CVE-2023-21803
CRITICAL 9.8
Windows iSCSI Discovery Service Remote Code Execution Vulnerability |
|
CVE-2023-21716
CRITICAL 9.8
Microsoft Word Remote Code Execution Vulnerability |
|
CVE-2023-21692
CRITICAL 9.8
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-21690
CRITICAL 9.8
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2023-21689
CRITICAL 9.8
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
|
CVE-2022-41903
CRITICAL · vendor
Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also ex… |
|
CVE-2023-21730
CRITICAL · vendor
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
|
CVE-2023-21712
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-21679
CRITICAL · vendor
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
|
CVE-2023-21561
CRITICAL · vendor
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
|
CVE-2023-21556
CRITICAL · vendor
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
|
CVE-2023-21555
CRITICAL · vendor
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
|
CVE-2023-21551
CRITICAL · vendor
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
|
CVE-2023-21548
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2023-21546
CRITICAL · vendor
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
|
CVE-2023-21543
CRITICAL · vendor
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
|
CVE-2023-21535
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.