Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,604 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,604
Actively exploited
374
Publication window
1997-01-01 → 2026-10-27
All CVEs 28,604 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,604 entries
CVE
CVE-2023-2722
HIGH 8.8
Chrome Google Chrome

Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafte…
CVE-2023-2721
HIGH 8.8
Chrome Google Chrome

Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…
CVE-2023-2458
HIGH 8.8
Chrome Google Chrome

Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who convinced a user to engage in specific UI …
CVE-2023-2457
HIGH 8.8
Chrome Google Chrome

Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corrupt…
CVE-2023-29335
HIGH 7.5
Microsoft Office Microsoft Word Office

Microsoft Word Security Feature Bypass Vulnerability
CVE-2023-24953
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-29336
HIGH · vendor KEV
Windows

Win32k Elevation of Privilege Vulnerability
CVE-2023-29325
CRITICAL · vendor
Windows

Windows OLE Remote Code Execution Vulnerability
CVE-2023-29324
HIGH · vendor
Windows

Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2023-28283
CRITICAL · vendor
Windows

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2023-28251
HIGH · vendor
Windows

Windows Driver Revocation List Security Feature Bypass Vulnerability
CVE-2023-24949
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-24948
HIGH · vendor
Windows

Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2023-24947
HIGH · vendor
Windows

Windows Bluetooth Driver Remote Code Execution Vulnerability
CVE-2023-24946
HIGH · vendor
Windows

Windows Backup Service Elevation of Privilege Vulnerability
CVE-2023-24945
HIGH · vendor
Windows

Windows iSCSI Target Service Information Disclosure Vulnerability
CVE-2023-24944
HIGH · vendor
Windows

Windows Bluetooth Driver Information Disclosure Vulnerability
CVE-2023-24943
CRITICAL · vendor
Windows

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-24942
HIGH · vendor
Windows

Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-24941
CRITICAL · vendor
Windows

Windows Network File System Remote Code Execution Vulnerability
CVE-2023-24940
HIGH · vendor
Windows

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
CVE-2023-24939
HIGH · vendor
Windows

Server for NFS Denial of Service Vulnerability
CVE-2023-24932
HIGH · vendor
Windows

Secure Boot Security Feature Bypass Vulnerability
CVE-2023-24905
HIGH · vendor
Windows

Remote Desktop Client Remote Code Execution Vulnerability
CVE-2023-24903
CRITICAL · vendor
Windows

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2023-24902
HIGH · vendor
Windows

Win32k Elevation of Privilege Vulnerability
CVE-2023-24901
HIGH · vendor
Windows

Windows NFS Portmapper Information Disclosure Vulnerability
CVE-2023-24900
HIGH · vendor
Windows

Windows NTLM Security Support Provider Information Disclosure Vulnerability
CVE-2023-24899
HIGH · vendor
Windows

Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-24898
HIGH · vendor
Windows

Windows SMB Denial of Service Vulnerability
CVE-2023-27967
HIGH 8.6
Xcode

The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute arbitrary code out of its sandbox or wi…
CVE-2023-27952
MEDIUM 4.7
macOS

A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks.
CVE-2023-27945
MEDIUM 6.3
Xcode

This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be abl…
CVE-2023-2468
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to …
CVE-2023-2467
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to bypass permissions restrictions via a c…
CVE-2023-2466
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to spoof the contents of the security UI via a crafte…
CVE-2023-2465
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chro…
CVE-2023-2464
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extens…
CVE-2023-2463
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnib…
CVE-2023-2462
MEDIUM 4.3
Chrome Google Chrome

Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page…
CVE-2023-2461
HIGH 8.8
Chrome Google Chrome

Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interact…
CVE-2023-2460
HIGH 7.1
Chrome Google Chrome

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a maliciou…
CVE-2023-2459
MEDIUM 6.5
Chrome Google Chrome

Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML …
CVE-2023-26085
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21666
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21665
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21118
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21117
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21116
MEDIUM · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21112
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM