Vulnerabilities

Tracked app vulnerabilities

28,053 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,053
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-20

All CVEs 28,053 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,053 entries

CVE	Severity	KEV	Apps	Published
CVE-2024-38030 HIGH · vendor Windows 2024-07-09 Windows Themes Spoofing Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-38028 HIGH · vendor Windows 2024-07-09 Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-38027 HIGH · vendor Windows 2024-07-09 Windows Line Printer Daemon Service Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-38025 HIGH · vendor Windows 2024-07-09 Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-38022 HIGH · vendor Windows 2024-07-09 Windows Image Acquisition Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-38019 HIGH · vendor Windows 2024-07-09 Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-38017 HIGH · vendor Windows 2024-07-09 Microsoft Message Queuing Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-38015 HIGH · vendor Windows 2024-07-09 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-38013 HIGH · vendor Windows 2024-07-09 Microsoft Windows Server Backup Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-38011 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-38010 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37989 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37988 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37987 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37986 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37985 HIGH · vendor Windows 2024-07-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37984 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37981 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37978 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37977 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37975 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37974 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37973 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37972 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37971 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37970 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-37969 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-35270 HIGH · vendor Windows 2024-07-09 Windows iSCSI Service Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-30098 HIGH · vendor Windows 2024-07-09 Windows Cryptographic Services Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-30081 HIGH · vendor Windows 2024-07-09 Windows NTLM Spoofing Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-30079 HIGH · vendor Windows 2024-07-09 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-30071 HIGH · vendor Windows 2024-07-09 Windows Remote Access Connection Manager Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-30013 HIGH · vendor Windows 2024-07-09 Windows MultiPoint Services Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-28899 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-26184 HIGH · vendor Windows 2024-07-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2024-21417 HIGH · vendor Windows 2024-07-09 Windows Text Services Framework Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-07-09
CVE-2020-8597 CRITICAL · vendor Android 2024-07-09 Microsoft Security Update Guide entry — NVD enrichira.	CRITICAL · vendor	—	Android	2024-07-09
CVE-2024-39891 MEDIUM 5.3 KEV Twilio Authy Authenticator 2024-07-02 In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-numb…	MEDIUM 5.3	KEV	Twilio Authy Authenticator	2024-07-02
CVE-2024-39573 HIGH 7.5 macOS 2024-07-01 Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handle…	HIGH 7.5	—	macOS	2024-07-01
CVE-2024-38477 HIGH 7.5 macOS 2024-07-01 null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recomm…	HIGH 7.5	—	macOS	2024-07-01
CVE-2024-38476 CRITICAL 9.8 macOS 2024-07-01 Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend application…	CRITICAL 9.8	—	macOS	2024-07-01
CVE-2024-6387 HIGH 8.1 macOS 2024-07-01 A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an uns…	HIGH 8.1	—	macOS	2024-07-01
CVE-2024-4610 HIGH · vendor KEV Android 2024-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	KEV	Android	2024-07-01
CVE-2024-34726 HIGH · vendor Android 2024-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-07-01
CVE-2024-34725 HIGH · vendor Android 2024-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-07-01
CVE-2024-34724 HIGH · vendor Android 2024-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-07-01
CVE-2024-34723 HIGH · vendor Android 2024-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-07-01
CVE-2024-34721 HIGH · vendor Android 2024-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-07-01
CVE-2024-34720 HIGH · vendor Android 2024-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-07-01
CVE-2024-31339 HIGH · vendor Android 2024-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-07-01

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM