Vulnerabilities

Tracked app vulnerabilities

28,379 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,379
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-26

All CVEs 28,379 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,379 entries

CVE	Severity	KEV	Apps	Published
CVE-2024-23593 HIGH · vendor Windows 2024-04-09 Lenovo: CVE-2024-23593 Modify Boot Manager and Escalate Privileges	HIGH · vendor	—	Windows	2024-04-09
CVE-2024-21447 HIGH · vendor Windows 2024-04-09 Windows Authentication Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-04-09
CVE-2024-20693 HIGH · vendor Windows 2024-04-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-04-09
CVE-2024-20678 HIGH · vendor Windows 2024-04-09 Remote Procedure Call Runtime Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-04-09
CVE-2024-20669 HIGH · vendor Windows 2024-04-09 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-04-09
CVE-2024-20665 HIGH · vendor Windows 2024-04-09 BitLocker Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-04-09
CVE-2022-0001 HIGH · vendor Windows 2024-04-09 Intel: CVE-2022-0001 Branch History Injection	HIGH · vendor	—	Windows	2024-04-09
CVE-2024-3159 HIGH 8.8 2024-04-06 Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (…	HIGH 8.8	—		2024-04-06
CVE-2024-3158 HIGH 8.8 2024-04-06 Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. …	HIGH 8.8	—		2024-04-06
CVE-2024-3156 HIGH 8.8 2024-04-06 Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds memory access via a …	HIGH 8.8	—		2024-04-06
CVE-2024-30370 MEDIUM 4.3 WinRAR 2024-04-02 RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-Of-The-Web protection mechanism on affected i…	MEDIUM 4.3	—	WinRAR	2024-04-02
CVE-2024-23713 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-23712 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-23710 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-23704 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-21472 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-21468 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-21463 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-20040 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-20039 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-0042 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-0027 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-0026 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2024-0022 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-33115 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-33104 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-33103 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-33101 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-33100 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-33099 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-33096 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-33095 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-33086 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-33084 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-33023 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-32890 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-28582 CRITICAL · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2024-04-01
CVE-2023-28547 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-21267 HIGH · vendor Android 2024-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2024-04-01
CVE-2023-42893 MEDIUM 5.5 iOS macOS 2024-03-28 A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3,…	MEDIUM 5.5	—	iOS macOS	2024-03-28
CVE-2024-2466 MEDIUM 6.5 macOS 2024-03-27 libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly av…	MEDIUM 6.5	—	macOS	2024-03-27
CVE-2024-2398 HIGH 8.6 macOS 2024-03-27 When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (10…	HIGH 8.6	—	macOS	2024-03-27
CVE-2024-2379 MEDIUM 6.3 macOS 2024-03-27 libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or c…	MEDIUM 6.3	—	macOS	2024-03-27
CVE-2024-2004 LOW 3.5 macOS 2024-03-27 When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to a…	LOW 3.5	—	macOS	2024-03-27
CVE-2024-2887 HIGH 7.7 2024-03-26 Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium se…	HIGH 7.7	—		2024-03-26
CVE-2024-2886 HIGH 7.5 2024-03-26 Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromiu…	HIGH 7.5	—		2024-03-26
CVE-2024-2885 HIGH 8.8 2024-03-26 Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…	HIGH 8.8	—		2024-03-26
CVE-2024-2883 HIGH 8.8 2024-03-26 Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…	HIGH 8.8	—		2024-03-26
CVE-2024-1580 MEDIUM · vendor macOS iOS 2024-03-25 [Apple CoreMedia] Processing an image may lead to arbitrary code execution	MEDIUM · vendor	—	macOS iOS	2024-03-25
CVE-2024-29057 MEDIUM 4.3 Microsoft Edge 2024-03-22 Microsoft Edge (Chromium-based) Spoofing Vulnerability	MEDIUM 4.3	—	Microsoft Edge	2024-03-22

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM