Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,604 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,604
Actively exploited
374
Publication window
1997-01-01 → 2026-10-27
All CVEs 28,604 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,604 entries
CVE
CVE-2023-36719
HIGH · vendor
Windows

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
CVE-2023-36705
HIGH · vendor
Windows

Windows Installer Elevation of Privilege Vulnerability
CVE-2023-36428
HIGH · vendor
Windows

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
CVE-2023-36427
HIGH · vendor
Windows

Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2023-36425
HIGH · vendor
Windows

Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVE-2023-36424
HIGH · vendor KEV
Windows

Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36423
HIGH · vendor
Windows

Microsoft Remote Registry Service Remote Code Execution Vulnerability
CVE-2023-36408
HIGH · vendor
Windows

Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2023-36407
HIGH · vendor
Windows

Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2023-36406
HIGH · vendor
Windows

Windows Hyper-V Information Disclosure Vulnerability
CVE-2023-36405
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-36404
HIGH · vendor
Windows

Windows Kernel Information Disclosure Vulnerability
CVE-2023-36403
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-36402
HIGH · vendor
Windows

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-36401
HIGH · vendor
Windows

Microsoft Remote Registry Service Remote Code Execution Vulnerability
CVE-2023-36400
CRITICAL · vendor
Windows

Windows HMAC Key Derivation Elevation of Privilege Vulnerability
CVE-2023-36399
HIGH · vendor
Windows

Windows Storage Elevation of Privilege Vulnerability
CVE-2023-36398
HIGH · vendor
Windows

Windows NTFS Information Disclosure Vulnerability
CVE-2023-36397
CRITICAL · vendor
Windows

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-36396
HIGH · vendor
Windows

Windows Compressed Folder Remote Code Execution Vulnerability
CVE-2023-36395
HIGH · vendor
Windows

Windows Deployment Services Denial of Service Vulnerability
CVE-2023-36394
HIGH · vendor
Windows

Windows Search Service Elevation of Privilege Vulnerability
CVE-2023-36393
HIGH · vendor
Windows

Windows User Interface Application Core Remote Code Execution Vulnerability
CVE-2023-36392
HIGH · vendor
Windows

DHCP Server Service Denial of Service Vulnerability
CVE-2023-36047
HIGH · vendor
Windows

Windows Authentication Elevation of Privilege Vulnerability
CVE-2023-36046
HIGH · vendor
Windows

Windows Authentication Denial of Service Vulnerability
CVE-2023-36036
HIGH · vendor KEV
Windows

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36033
HIGH · vendor KEV
Windows

Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2023-36028
HIGH · vendor
Windows

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-36025
HIGH · vendor KEV
Windows

Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-36017
HIGH · vendor
Windows

Windows Scripting Engine Memory Corruption Vulnerability
CVE-2023-5996
HIGH 8.8
Chrome Google Chrome

Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…
CVE-2023-31102
HIGH 7.8
7-Zip

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.
CVE-2023-36029
MEDIUM 4.3
Microsoft Edge

Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2023-5859
MEDIUM 4.3
Chrome Google Chrome

Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted local H…
CVE-2023-5858
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML …
CVE-2023-5857
HIGH 8.8
Chrome Google Chrome

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malici…
CVE-2023-5856
HIGH 8.8
Chrome Google Chrome

Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten…
CVE-2023-5855
HIGH 8.8
Chrome Google Chrome

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to pot…
CVE-2023-5854
HIGH 8.8
Chrome Google Chrome

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti…
CVE-2023-5853
MEDIUM 4.3
Chrome Google Chrome

Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromi…
CVE-2023-5852
HIGH 8.8
Chrome Google Chrome

Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti…
CVE-2023-5851
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. …
CVE-2023-5850
MEDIUM 4.3
Chrome Google Chrome

Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Ch…
CVE-2023-5849
HIGH 8.8
Chrome Google Chrome

Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…
CVE-2023-5482
HIGH 8.8
Chrome Google Chrome

Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTM…
CVE-2023-5480
MEDIUM 6.1
Chrome Google Chrome

Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XSS preventions via a malicious file. (Ch…
CVE-2023-40124
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40115
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-40114
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM