Vulnerabilities

Tracked app vulnerabilities

28,054 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,054
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-20

All CVEs 28,054 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,054 entries

CVE	Severity	KEV	Apps	Published
CVE-2024-30016 HIGH · vendor Windows 2024-05-14 Windows Cryptographic Services Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30015 HIGH · vendor Windows 2024-05-14 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30014 HIGH · vendor Windows 2024-05-14 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30012 HIGH · vendor Windows 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30011 HIGH · vendor Windows 2024-05-14 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30010 HIGH · vendor Windows 2024-05-14 Windows Hyper-V Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30009 HIGH · vendor Windows 2024-05-14 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30008 HIGH · vendor Windows 2024-05-14 Windows DWM Core Library Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30007 HIGH · vendor Windows 2024-05-14 Microsoft Brokering File System Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30006 HIGH · vendor Windows 2024-05-14 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30005 HIGH · vendor Windows 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30004 HIGH · vendor Windows 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30003 HIGH · vendor Windows 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30002 HIGH · vendor Windows 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30001 HIGH · vendor Windows 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-30000 HIGH · vendor Windows 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-29999 HIGH · vendor Windows 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-29998 HIGH · vendor Windows 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-29997 HIGH · vendor Windows 2024-05-14 Windows Mobile Broadband Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-29996 HIGH · vendor Windows 2024-05-14 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-29994 HIGH · vendor Windows 2024-05-14 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-26238 HIGH · vendor Windows 2024-05-14 Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-05-14
CVE-2024-4559 MEDIUM 6.5 2024-05-07 Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	MEDIUM 6.5	—		2024-05-07
CVE-2024-4558 CRITICAL 9.6 iOS macOS 2024-05-07 Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…	CRITICAL 9.6	—	iOS macOS	2024-05-07
CVE-2023-40481 HIGH 7.8 7-Zip 2024-05-03 7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af…	HIGH 7.8	—	7-Zip	2024-05-03
CVE-2023-40477 HIGH 7.8 WinRAR 2024-05-03 RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…	HIGH 7.8	—	WinRAR	2024-05-03
CVE-2024-4368 HIGH 8.8 2024-05-01 Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…	HIGH 8.8	—		2024-05-01
CVE-2024-4331 HIGH 8.8 2024-05-01 Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…	HIGH 8.8	—		2024-05-01
CVE-2024-4060 MEDIUM 6.5 2024-05-01 Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…	MEDIUM 6.5	—		2024-05-01
CVE-2024-4059 MEDIUM 6.5 2024-05-01 Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. (Chromium secur…	MEDIUM 6.5	—		2024-05-01
CVE-2024-4058 HIGH 8.8 2024-05-01 Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…	HIGH 8.8	—		2024-05-01
CVE-2024-23709 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-23708 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-23707 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-23706 CRITICAL · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2024-05-01
CVE-2024-23705 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-23354 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-23351 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-21480 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-21477 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-21475 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-21471 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-20057 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-20056 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-1395 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-1067 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-0043 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-0025 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2024-0024 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01
CVE-2023-6363 HIGH · vendor Android 2024-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-05-01

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM