Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

28,604 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
28,604
Actively exploited
374
Publication window
1997-01-01 → 2026-10-27
All CVEs 28,604 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,604 entries
CVE
CVE-2023-28222
HIGH · vendor
Windows

Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-28221
HIGH · vendor
Windows

Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2023-28220
CRITICAL · vendor
Windows

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-28219
CRITICAL · vendor
Windows

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-28218
HIGH · vendor
Windows

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2023-28217
HIGH · vendor
Windows

Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2023-28216
HIGH · vendor
Windows

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2023-24931
HIGH · vendor
Windows

Windows Secure Channel Denial of Service Vulnerability
CVE-2023-24929
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24928
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24927
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24926
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24925
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24924
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24914
HIGH · vendor
Windows

Win32k Elevation of Privilege Vulnerability
CVE-2023-24912
HIGH · vendor
Windows

Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-24887
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24886
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24885
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24884
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24883
HIGH · vendor
Windows

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-21769
HIGH · vendor
Windows

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-21729
HIGH · vendor
Windows

Remote Procedure Call Runtime Information Disclosure Vulnerability
CVE-2023-21727
HIGH · vendor
Windows

Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2023-21554
CRITICAL · vendor
Windows

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2021-45985
HIGH · vendor
Windows

Mitre: CVE-2021-45985 Erroneous finalizer call in Lua leads to a heap-based buffer over-read
CVE-2023-1823
MEDIUM 6.5
Chrome Google Chrome

Inappropriate implementation in FedCM in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML pa…
CVE-2023-1822
MEDIUM 6.5
Chrome Google Chrome

Incorrect security UI in Navigation in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chro…
CVE-2023-1821
MEDIUM 6.5
Chrome Google Chrome

Inappropriate implementation in WebShare in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially hide the contents of the Omnibox (URL…
CVE-2023-1820
HIGH 8.8
Chrome Google Chrome

Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interac…
CVE-2023-1819
MEDIUM 6.5
Chrome Google Chrome

Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTM…
CVE-2023-1818
HIGH 8.8
Chrome Google Chrome

Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…
CVE-2023-1817
MEDIUM 6.5
Chrome Google Chrome

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a…
CVE-2023-1816
MEDIUM 6.5
Chrome Google Chrome

Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a …
CVE-2023-1815
HIGH 8.8
Chrome Google Chrome

Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction t…
CVE-2023-1814
MEDIUM 6.5
Chrome Google Chrome

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass download checking via a…
CVE-2023-1813
MEDIUM 6.5
Chrome Google Chrome

Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a user to install a malicious extension to…
CVE-2023-1812
HIGH 8.8
Chrome Google Chrome

Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform out of bounds memory access via a craf…
CVE-2023-1811
HIGH 8.8
Chrome Google Chrome

Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potenti…
CVE-2023-1810
HIGH 8.8
Chrome Google Chrome

Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially explo…
CVE-2023-21630
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21100
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21099
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21098
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21097
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21096
CRITICAL · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21094
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21093
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21092
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-21091
HIGH · vendor
Android

Indexed via Android Security Bulletin; full NVD metadata pending.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM