Vulnerabilities
Tracked app vulnerabilities
28,545 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,545
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-27
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-26176
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-26174
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2024-26173
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-26170
HIGH · vendor
Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability |
|
CVE-2024-26169
Windows Error Reporting Service Elevation of Privilege Vulnerability |
|
CVE-2024-26166
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-26162
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-26161
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-26160
HIGH · vendor
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
|
CVE-2024-26159
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-21451
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-21450
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-21446
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2024-21445
HIGH · vendor
Windows USB Print Driver Elevation of Privilege Vulnerability |
|
CVE-2024-21444
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-21443
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2024-21442
HIGH · vendor
Windows USB Print Driver Elevation of Privilege Vulnerability |
|
CVE-2024-21441
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2024-21440
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2024-21439
HIGH · vendor
Windows Telephony Server Elevation of Privilege Vulnerability |
|
CVE-2024-21438
HIGH · vendor
Microsoft AllJoyn API Denial of Service Vulnerability |
|
CVE-2024-21437
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2024-21436
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2024-21435
HIGH · vendor
Windows OLE Remote Code Execution Vulnerability |
|
CVE-2024-21434
HIGH · vendor
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
|
CVE-2024-21433
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2024-21432
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2024-21431
HIGH · vendor
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability |
|
CVE-2024-21430
HIGH · vendor
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability |
|
CVE-2024-21429
HIGH · vendor
Windows USB Hub Driver Remote Code Execution Vulnerability |
|
CVE-2024-21427
HIGH · vendor
Windows Kerberos Security Feature Bypass Vulnerability |
|
CVE-2024-21408
CRITICAL · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2024-21407
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2024-23297
MEDIUM 5.5
The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS 17.4, watchOS 10.4. A malicious application may be able to … |
|
CVE-2024-23294
HIGH 7.8
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution. |
|
CVE-2024-23293
This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An att… |
|
CVE-2024-23292
This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access inform… |
|
CVE-2024-23291
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17… |
|
CVE-2024-23290
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may… |
|
CVE-2024-23289
A lock screen issue was addressed with improved state management. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 1… |
|
CVE-2024-23288
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app m… |
|
CVE-2024-23287
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An a… |
|
CVE-2024-23286
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monte… |
|
CVE-2024-23285
MEDIUM 5.5
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.4. An app may be able to create symlinks to protected regio… |
|
CVE-2024-23284
A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS S… |
|
CVE-2024-23283
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4,… |
|
CVE-2024-23281
MEDIUM 5.5
This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.4. An app may be able to access sensitive user data. |
|
CVE-2024-23280
An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS … |
|
CVE-2024-23279
MEDIUM 5.5
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user… |
|
CVE-2024-23278
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, macOS Ventura 1… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.