Vulnerabilities
Tracked app vulnerabilities
28,058 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,058
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-26246
LOW 3.9
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
|
CVE-2023-42938
HIGH 7.8
A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.13.1 for Windows. A local attacker may be able to elevate their privileges. |
|
CVE-2023-28746
MEDIUM 6.5
Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an auth… |
|
CVE-2024-2400
HIGH 8.8
Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
|
CVE-2024-26204
HIGH 7.5
Outlook for Android Information Disclosure Vulnerability |
|
CVE-2024-21390
HIGH 7.1
Microsoft Authenticator Elevation of Privilege Vulnerability |
|
CVE-2024-26197
HIGH · vendor
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2024-26190
HIGH · vendor
Microsoft QUIC Denial of Service Vulnerability |
|
CVE-2024-26185
HIGH · vendor
Windows Compressed Folder Tampering Vulnerability |
|
CVE-2024-26182
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-26181
HIGH · vendor
Windows Kernel Denial of Service Vulnerability |
|
CVE-2024-26178
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-26177
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2024-26176
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-26174
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2024-26173
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-26170
HIGH · vendor
Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability |
|
CVE-2024-26169
Windows Error Reporting Service Elevation of Privilege Vulnerability |
|
CVE-2024-26166
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-26162
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-26161
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-26160
HIGH · vendor
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
|
CVE-2024-26159
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-21451
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-21450
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-21446
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2024-21445
HIGH · vendor
Windows USB Print Driver Elevation of Privilege Vulnerability |
|
CVE-2024-21444
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-21443
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-21442
HIGH · vendor
Windows USB Print Driver Elevation of Privilege Vulnerability |
|
CVE-2024-21441
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-21440
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-21439
HIGH · vendor
Windows Telephony Server Elevation of Privilege Vulnerability |
|
CVE-2024-21438
HIGH · vendor
Microsoft AllJoyn API Denial of Service Vulnerability |
|
CVE-2024-21437
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2024-21436
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2024-21435
HIGH · vendor
Windows OLE Remote Code Execution Vulnerability |
|
CVE-2024-21434
HIGH · vendor
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
|
CVE-2024-21433
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2024-21432
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2024-21431
HIGH · vendor
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability |
|
CVE-2024-21430
HIGH · vendor
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability |
|
CVE-2024-21429
HIGH · vendor
Windows USB Hub Driver Remote Code Execution Vulnerability |
|
CVE-2024-21427
HIGH · vendor
Windows Kerberos Security Feature Bypass Vulnerability |
|
CVE-2024-21408
CRITICAL · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-21407
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-23297
MEDIUM 5.5
The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS 17.4, watchOS 10.4. A malicious application may be able to … |
|
CVE-2024-23294
HIGH 7.8
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution. |
|
CVE-2024-23293
This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An att… |
|
CVE-2024-23292
This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access inform… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.