Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

2,721 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
2,721
Actively exploited
48
Publication window
2007-08-28 → 2026-11-10
All CVEs 2,721 CISA KEV 48 Public exploit 56 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

2,721 entries Critical Clear all
CVE
CVE-2023-28574
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-22388
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21671
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-5730
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume tha…
CVE-2023-41774
CRITICAL · vendor
Windows

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41773
CRITICAL · vendor
Windows

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41771
CRITICAL · vendor
Windows

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41770
CRITICAL · vendor
Windows

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41769
CRITICAL · vendor
Windows

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41768
CRITICAL · vendor
Windows

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41767
CRITICAL · vendor
Windows

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-41765
CRITICAL · vendor
Windows

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-38166
CRITICAL · vendor
Windows

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-36718
CRITICAL · vendor
Windows

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability
CVE-2023-36697
CRITICAL · vendor
Windows

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-35349
CRITICAL · vendor
Windows

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-40129
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33028
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-28540
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-24855
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-5176
CRITICAL · vendor
Mozilla Thunderbird Mozilla Firefox

Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume tha…
CVE-2023-5174
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free a…
CVE-2023-5168
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable …
CVE-2023-38148
CRITICAL · vendor
Windows

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2023-35681
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-35673
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-35658
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-28581
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-13690
CRITICAL 9.6
Chrome Google Chrome

Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilege escalation via a …
CVE-2022-48565
CRITICAL 9.8
Python 3.12 Python 3.13 Python 3.14

An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoi…
CVE-2023-36911
CRITICAL 9.8
Windows

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36910
CRITICAL 9.8
Windows

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-35385
CRITICAL 9.8
Windows

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-21282
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21273
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21264
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2022-40510
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2022-4924
CRITICAL 9.6
Chrome Google Chrome

Use after free in WebRTC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who had compromised the renderer process to potentially perform a san…
CVE-2022-4920
CRITICAL 9.6
Chrome Google Chrome

Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten…
CVE-2023-33150
CRITICAL 9.6
Microsoft Office Microsoft Word Office

Microsoft Office Security Feature Bypass Vulnerability
CVE-2023-35367
CRITICAL · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35366
CRITICAL · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35365
CRITICAL · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2023-35352
CRITICAL · vendor
Windows

Windows Remote Desktop Security Feature Bypass Vulnerability
CVE-2023-35315
CRITICAL · vendor
Windows

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
CVE-2023-35297
CRITICAL · vendor
Windows

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-32057
CRITICAL · vendor
Windows

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-21629
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21250
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-34417
CRITICAL 9.8
Mozilla Firefox

Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM