Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,545 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,545
Actively exploited
374
Publication window
1997-01-01 → 2026-10-27

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,545 entries
CVE
CVE-2024-26176
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-26174
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2024-26173
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-26170
HIGH · vendor

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

CVE-2024-26169
HIGH · vendor KEV

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVE-2024-26166
HIGH · vendor

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-26162
HIGH · vendor

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2024-26161
HIGH · vendor

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-26160
HIGH · vendor

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

CVE-2024-26159
HIGH · vendor

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2024-21451
HIGH · vendor

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2024-21450
HIGH · vendor

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21446
HIGH · vendor

NTFS Elevation of Privilege Vulnerability

CVE-2024-21445
HIGH · vendor

Windows USB Print Driver Elevation of Privilege Vulnerability

CVE-2024-21444
HIGH · vendor

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21443
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2024-21442
HIGH · vendor

Windows USB Print Driver Elevation of Privilege Vulnerability

CVE-2024-21441
HIGH · vendor

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2024-21440
HIGH · vendor

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2024-21439
HIGH · vendor

Windows Telephony Server Elevation of Privilege Vulnerability

CVE-2024-21438
HIGH · vendor

Microsoft AllJoyn API Denial of Service Vulnerability

CVE-2024-21437
HIGH · vendor

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2024-21436
HIGH · vendor

Windows Installer Elevation of Privilege Vulnerability

CVE-2024-21435
HIGH · vendor

Windows OLE Remote Code Execution Vulnerability

CVE-2024-21434
HIGH · vendor

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

CVE-2024-21433
HIGH · vendor

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2024-21432
HIGH · vendor

Windows Update Stack Elevation of Privilege Vulnerability

CVE-2024-21431
HIGH · vendor

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

CVE-2024-21430
HIGH · vendor

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

CVE-2024-21429
HIGH · vendor

Windows USB Hub Driver Remote Code Execution Vulnerability

CVE-2024-21427
HIGH · vendor

Windows Kerberos Security Feature Bypass Vulnerability

CVE-2024-21408
CRITICAL · vendor

Windows Hyper-V Denial of Service Vulnerability

CVE-2024-21407
CRITICAL · vendor

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2024-23297
MEDIUM 5.5

The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS 17.4, watchOS 10.4. A malicious application may be able to …

CVE-2024-23294
HIGH 7.8

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution.

CVE-2024-23293
MEDIUM 4.6

This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An att…

CVE-2024-23292
LOW 3.3

This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access inform…

CVE-2024-23291
LOW 3.3

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17…

CVE-2024-23290
MEDIUM 5.5

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may…

CVE-2024-23289
LOW 3.3

A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 1…

CVE-2024-23288
HIGH 7.8

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app m…

CVE-2024-23287
MEDIUM 5.5

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An a…

CVE-2024-23286
HIGH 7.8

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monte…

CVE-2024-23285
MEDIUM 5.5

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.4. An app may be able to create symlinks to protected regio…

CVE-2024-23284
MEDIUM 6.5

A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS S…

CVE-2024-23283
MEDIUM 5.5

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4,…

CVE-2024-23281
MEDIUM 5.5

This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.4. An app may be able to access sensitive user data.

CVE-2024-23280
MEDIUM 6.5

An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS …

CVE-2024-23279
MEDIUM 5.5

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user…

CVE-2024-23278
HIGH 8.6

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, macOS Ventura 1…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM