Vulnerabilities
Tracked app vulnerabilities
28,058 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,058
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-26220
HIGH · vendor
Windows Mobile Hotspot Information Disclosure Vulnerability |
|
CVE-2024-26219
HIGH · vendor
HTTP.sys Denial of Service Vulnerability |
|
CVE-2024-26218
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-26217
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2024-26216
HIGH · vendor
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2024-26215
HIGH · vendor
DHCP Server Service Denial of Service Vulnerability |
|
CVE-2024-26214
HIGH · vendor
Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-26213
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2024-26212
HIGH · vendor
DHCP Server Service Denial of Service Vulnerability |
|
CVE-2024-26211
HIGH · vendor
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2024-26210
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-26209
HIGH · vendor
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
|
CVE-2024-26208
HIGH · vendor
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2024-26207
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2024-26205
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-26202
HIGH · vendor
DHCP Server Service Remote Code Execution Vulnerability |
|
CVE-2024-26200
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-26195
HIGH · vendor
DHCP Server Service Remote Code Execution Vulnerability |
|
CVE-2024-26194
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-26189
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-26183
HIGH · vendor
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2024-26180
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-26179
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2024-26175
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-26172
HIGH · vendor
Windows DWM Core Library Information Disclosure Vulnerability |
|
CVE-2024-26171
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-26168
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-26158
HIGH · vendor
Microsoft Install Service Elevation of Privilege Vulnerability |
|
CVE-2024-23594
HIGH · vendor
Lenovo: CVE-2024-23594 Stack buffer overflow in Lenovo system recovery boot manager |
|
CVE-2024-23593
HIGH · vendor
Lenovo: CVE-2024-23593 Modify Boot Manager and Escalate Privileges |
|
CVE-2024-21447
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2024-20693
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-20678
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2024-20669
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2024-20665
HIGH · vendor
BitLocker Security Feature Bypass Vulnerability |
|
CVE-2022-0001
HIGH · vendor
Intel: CVE-2022-0001 Branch History Injection |
|
CVE-2024-3159
HIGH 8.8
Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (… |
|
CVE-2024-3158
HIGH 8.8
Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. … |
|
CVE-2024-3156
HIGH 8.8
Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds memory access via a … |
|
CVE-2024-30370
MEDIUM 4.3
RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-Of-The-Web protection mechanism on affected i… |
|
CVE-2024-23713
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-23712
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-23710
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-23704
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-21472
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-21468
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-21463
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-20040
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-20039
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-0042
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.