Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,053 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,053
Actively exploited
374
Publication window
1997-01-01 → 2026-10-20

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,053 entries
CVE
CVE-2024-35250
HIGH 7.8 KEV

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-30104
HIGH 7.8

Microsoft Office Remote Code Execution Vulnerability

CVE-2024-30103
HIGH 8.8

Microsoft Outlook Remote Code Execution Vulnerability

CVE-2024-30101
HIGH 7.5

Microsoft Office Remote Code Execution Vulnerability

CVE-2024-30099
HIGH 7.0

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-30097
HIGH 8.8

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

CVE-2024-30096
MEDIUM 5.5

Windows Cryptographic Services Information Disclosure Vulnerability

CVE-2024-30095
HIGH 7.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-30094
HIGH 7.8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2024-30093
HIGH 7.3

Windows Storage Elevation of Privilege Vulnerability

CVE-2024-30091
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-30090
HIGH 7.0

Microsoft Streaming Service Elevation of Privilege Vulnerability

CVE-2024-30089
HIGH 7.8

Microsoft Streaming Service Elevation of Privilege Vulnerability

CVE-2024-30088
HIGH 7.0 KEV

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-30087
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-30086
HIGH 7.8

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2024-30085
HIGH 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2024-30084
HIGH 7.0

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVE-2024-30083
HIGH 7.5

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

CVE-2024-30082
HIGH 7.8

Win32k Elevation of Privilege Vulnerability

CVE-2024-30080
CRITICAL 9.8

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVE-2024-30078
HIGH 8.8

Windows Wi-Fi Driver Remote Code Execution Vulnerability

CVE-2024-30077
HIGH 8.0

Windows OLE Remote Code Execution Vulnerability

CVE-2024-30076
MEDIUM 6.8

Windows Container Manager Service Elevation of Privilege Vulnerability

CVE-2024-30072
HIGH 7.8

Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability

CVE-2024-30070
HIGH 7.5

DHCP Server Service Denial of Service Vulnerability

CVE-2024-30069
MEDIUM 4.7

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVE-2024-30068
HIGH 8.8

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-30067
MEDIUM 5.5

Winlogon Elevation of Privilege Vulnerability

CVE-2024-30066
MEDIUM 5.5

Winlogon Elevation of Privilege Vulnerability

CVE-2024-30065
MEDIUM 5.5

Windows Themes Denial of Service Vulnerability

CVE-2024-30063
MEDIUM 6.7

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVE-2024-30062
HIGH 7.8

Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability

CVE-2024-5702
HIGH · vendor

Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, an…

CVE-2024-5700
HIGH 7.0

Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume t…

CVE-2024-5696
HIGH 8.6

By manipulating the text in an `&lt;input&gt;` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability…

CVE-2024-5693
MEDIUM 6.1

Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. T…

CVE-2024-5692
MEDIUM 6.5

On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.ur…

CVE-2024-5691
MEDIUM 4.7

By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions…

CVE-2024-5690
MEDIUM · vendor

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulner…

CVE-2024-5688
HIGH 8.1

If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 12…

CVE-2024-30064
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-50868
HIGH · vendor

MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU

CVE-2023-38546
LOW · vendor

Microsoft Security Update Guide entry — NVD enrichira.

CVE-2024-27885
MEDIUM 6.3

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app ma…

CVE-2024-27857
HIGH 7.8

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visio…

CVE-2024-27855
HIGH 8.8

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, macOS Ventura 1…

CVE-2024-27851
HIGH 8.8

The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, …

CVE-2024-27850
MEDIUM 6.5

This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, v…

CVE-2024-27848
HIGH 7.8

This issue was addressed with improved permissions checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. A malicious app may be able to…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM