Vulnerabilities
Tracked app vulnerabilities
28,053 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,053
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-35250
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-30104
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2024-30103
Microsoft Outlook Remote Code Execution Vulnerability |
|
CVE-2024-30101
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2024-30099
HIGH 7.0
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-30097
HIGH 8.8
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
|
CVE-2024-30096
MEDIUM 5.5
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2024-30095
HIGH 7.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30094
HIGH 7.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-30093
HIGH 7.3
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2024-30091
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-30090
HIGH 7.0
Microsoft Streaming Service Elevation of Privilege Vulnerability |
|
CVE-2024-30089
HIGH 7.8
Microsoft Streaming Service Elevation of Privilege Vulnerability |
|
CVE-2024-30088
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-30087
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-30086
HIGH 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2024-30085
HIGH 7.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2024-30084
HIGH 7.0
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2024-30083
HIGH 7.5
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2024-30082
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2024-30080
CRITICAL 9.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2024-30078
HIGH 8.8
Windows Wi-Fi Driver Remote Code Execution Vulnerability |
|
CVE-2024-30077
HIGH 8.0
Windows OLE Remote Code Execution Vulnerability |
|
CVE-2024-30076
MEDIUM 6.8
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2024-30072
HIGH 7.8
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability |
|
CVE-2024-30070
HIGH 7.5
DHCP Server Service Denial of Service Vulnerability |
|
CVE-2024-30069
MEDIUM 4.7
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2024-30068
HIGH 8.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-30067
MEDIUM 5.5
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2024-30066
MEDIUM 5.5
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2024-30065
MEDIUM 5.5
Windows Themes Denial of Service Vulnerability |
|
CVE-2024-30063
MEDIUM 6.7
Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
|
CVE-2024-30062
HIGH 7.8
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability |
|
CVE-2024-5702
Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox < 125, Firefox ESR < 115.12, an… |
|
CVE-2024-5700
Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume t… |
|
CVE-2024-5696
By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability… |
|
CVE-2024-5693
Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. T… |
|
CVE-2024-5692
On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.ur… |
|
CVE-2024-5691
By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions… |
|
CVE-2024-5690
By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulner… |
|
CVE-2024-5688
If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 12… |
|
CVE-2024-30064
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2023-50868
HIGH · vendor
MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU |
|
CVE-2023-38546
LOW · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2024-27885
MEDIUM 6.3
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app ma… |
|
CVE-2024-27857
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visio… |
|
CVE-2024-27855
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, macOS Ventura 1… |
|
CVE-2024-27851
The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, … |
|
CVE-2024-27850
This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, v… |
|
CVE-2024-27848
This issue was addressed with improved permissions checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. A malicious app may be able to… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.