Vulnerabilities

Tracked app vulnerabilities

28,604 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,604
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-27

All CVEs 28,604 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,604 entries

CVE	Severity	KEV	Apps	Published
CVE-2023-49646 MEDIUM 6.4 2023-12-13 Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.	MEDIUM 6.4	—		2023-12-13
CVE-2023-43585 HIGH 7.1 Zoom 2023-12-13 Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of infor…	HIGH 7.1	—	Zoom	2023-12-13
CVE-2023-43583 MEDIUM 4.9 2023-12-13 Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow a privileged user …	MEDIUM 4.9	—		2023-12-13
CVE-2023-35636 MEDIUM 6.5 2023-12-12 Microsoft Outlook Information Disclosure Vulnerability	MEDIUM 6.5	—		2023-12-12
CVE-2023-36696 HIGH · vendor Windows 2023-12-12 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-36391 HIGH · vendor Windows 2023-12-12 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-36012 HIGH · vendor Windows 2023-12-12 DHCP Server Service Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-36011 HIGH · vendor Windows 2023-12-12 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-36006 HIGH · vendor Windows 2023-12-12 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-36005 HIGH · vendor Windows 2023-12-12 Windows Telephony Server Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-36004 HIGH · vendor Windows 2023-12-12 Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-36003 HIGH · vendor Windows 2023-12-12 XAML Diagnostics Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-35644 HIGH · vendor Windows 2023-12-12 Windows Sysmain Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-35643 HIGH · vendor Windows 2023-12-12 DHCP Server Service Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-35642 HIGH · vendor Windows 2023-12-12 Internet Connection Sharing (ICS) Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-35641 CRITICAL · vendor Windows 2023-12-12 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-12-12
CVE-2023-35639 HIGH · vendor Windows 2023-12-12 Microsoft ODBC Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-35638 HIGH · vendor Windows 2023-12-12 DHCP Server Service Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-35635 HIGH · vendor Windows 2023-12-12 Windows Kernel Denial of Service Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-35634 HIGH · vendor Windows 2023-12-12 Windows Bluetooth Driver Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-35632 HIGH · vendor Windows 2023-12-12 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-35631 HIGH · vendor Windows 2023-12-12 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-35630 CRITICAL · vendor Windows 2023-12-12 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-12-12
CVE-2023-35628 CRITICAL · vendor Windows 2023-12-12 Windows MSHTML Platform Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2023-12-12
CVE-2023-35622 HIGH · vendor Windows 2023-12-12 Windows DNS Spoofing Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-21740 HIGH · vendor Windows 2023-12-12 Windows Media Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-20588 HIGH · vendor Windows 2023-12-12 AMD: CVE-2023-20588 AMD Speculative Leaks Security Notice	HIGH · vendor	—	Windows	2023-12-12
CVE-2023-6507 MEDIUM 6.1 2023-12-08 An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. …	MEDIUM 6.1	—		2023-12-08
CVE-2023-6512 MEDIUM 6.5 2023-12-06 Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially spoof the contents of an iframe…	MEDIUM 6.5	—		2023-12-06
CVE-2023-6511 MEDIUM 4.3 2023-12-06 Inappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML p…	MEDIUM 4.3	—		2023-12-06
CVE-2023-6510 HIGH 8.8 2023-12-06 Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction to …	HIGH 8.8	—		2023-12-06
CVE-2023-6509 HIGH 8.8 2023-12-06 Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction…	HIGH 8.8	—		2023-12-06
CVE-2023-6508 HIGH 8.8 2023-12-06 Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…	HIGH 8.8	—		2023-12-06
CVE-2023-45866 MEDIUM · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2023-12-01
CVE-2023-45781 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-45779 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-45777 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-45776 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-45775 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-45774 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-45773 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-4272 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-40103 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-40098 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-40097 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-40096 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-40095 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-40094 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-40092 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01
CVE-2023-40091 HIGH · vendor Android 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2023-12-01

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM