Vulnerabilities
Tracked app vulnerabilities
28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,052
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-44307
HIGH 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code wit… |
|
CVE-2024-44306
HIGH 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code wit… |
|
CVE-2024-11395
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2024-50302
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds… |
|
CVE-2024-11159
MEDIUM 4.3
Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < … |
|
CVE-2024-11117
MEDIUM 4.3
Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass filesystem restrictions via a crafted HT… |
|
CVE-2024-11116
MEDIUM 4.3
Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures … |
|
CVE-2024-11115
HIGH 8.8
Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a se… |
|
CVE-2024-11114
HIGH 8.3
Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to … |
|
CVE-2024-11113
HIGH 8.8
Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially explo… |
|
CVE-2024-11112
HIGH 8.8
Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2024-11111
MEDIUM 4.3
Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestur… |
|
CVE-2024-11110
MEDIUM 6.5
Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Exte… |
|
CVE-2024-49039
Windows Task Scheduler Elevation of Privilege Vulnerability |
|
CVE-2024-49033
HIGH 7.5
Microsoft Word Security Feature Bypass Vulnerability |
|
CVE-2024-49030
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49029
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49028
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49027
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49026
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2024-49046
HIGH · vendor
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2024-49019
HIGH · vendor
Active Directory Certificate Services Elevation of Privilege Vulnerability |
|
CVE-2024-43646
HIGH · vendor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2024-43645
HIGH · vendor
Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability |
|
CVE-2024-43644
HIGH · vendor
Windows Client-Side Caching Elevation of Privilege Vulnerability |
|
CVE-2024-43643
HIGH · vendor
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43642
HIGH · vendor
Windows SMB Denial of Service Vulnerability |
|
CVE-2024-43641
HIGH · vendor
Windows Registry Elevation of Privilege Vulnerability |
|
CVE-2024-43640
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43639
CRITICAL · vendor
Windows KDC Proxy Remote Code Execution Vulnerability |
|
CVE-2024-43638
HIGH · vendor
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43637
HIGH · vendor
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43636
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-43635
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43634
HIGH · vendor
Windows USB Video Class System Driver Elevation of Privilege Vulnerability |
|
CVE-2024-43633
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-43631
HIGH · vendor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2024-43630
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-43629
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2024-43628
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43627
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43626
HIGH · vendor
Windows Telephony Service Elevation of Privilege Vulnerability |
|
CVE-2024-43625
CRITICAL · vendor
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability |
|
CVE-2024-43624
HIGH · vendor
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability |
|
CVE-2024-43623
HIGH · vendor
Windows NT OS Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-43622
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43621
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43620
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2024-43530
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2024-43452
HIGH · vendor
Windows Registry Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.