Vulnerabilities
Tracked app vulnerabilities
28,604 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,604
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-27
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2023-23419
HIGH · vendor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2023-23418
HIGH · vendor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2023-23417
HIGH · vendor
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2023-23416
CRITICAL · vendor
Windows Cryptographic Services Remote Code Execution Vulnerability |
|
CVE-2023-23415
CRITICAL · vendor
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability |
|
CVE-2023-23414
HIGH · vendor
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
|
CVE-2023-23413
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-23412
HIGH · vendor
Windows Accounts Picture Elevation of Privilege Vulnerability |
|
CVE-2023-23411
CRITICAL · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2023-23410
HIGH · vendor
Windows HTTP.sys Elevation of Privilege Vulnerability |
|
CVE-2023-23409
HIGH · vendor
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability |
|
CVE-2023-23407
HIGH · vendor
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
|
CVE-2023-23406
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-23405
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2023-23404
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2023-23403
HIGH · vendor
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
|
CVE-2023-23402
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-23401
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2023-23400
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2023-23394
HIGH · vendor
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability |
|
CVE-2023-23393
HIGH · vendor
Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability |
|
CVE-2023-23392
CRITICAL · vendor
HTTP Protocol Stack Remote Code Execution Vulnerability |
|
CVE-2023-23388
HIGH · vendor
Windows Bluetooth Driver Elevation of Privilege Vulnerability |
|
CVE-2023-23385
HIGH · vendor
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
|
CVE-2023-21708
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2023-1018
CRITICAL · vendor
CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability |
|
CVE-2023-1017
CRITICAL · vendor
CERT/CC: CVE-2023-1017 TPM2.0 Module Library Elevation of Privilege Vulnerability |
|
CVE-2021-29647
MEDIUM · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2023-1236
MEDIUM 4.3
Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML… |
|
CVE-2023-1235
MEDIUM 6.3
Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
|
CVE-2023-1234
MEDIUM 4.3
Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted H… |
|
CVE-2023-1233
MEDIUM 4.3
Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious exte… |
|
CVE-2023-1232
MEDIUM 4.3
Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive informatio… |
|
CVE-2023-1231
MEDIUM 4.3
Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the … |
|
CVE-2023-1230
MEDIUM 4.3
Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malici… |
|
CVE-2023-1229
MEDIUM 4.3
Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a cr… |
|
CVE-2023-1228
MEDIUM 4.3
Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a… |
|
CVE-2023-1227
HIGH 8.8
Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to… |
|
CVE-2023-1226
MEDIUM 6.5
Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a c… |
|
CVE-2023-1225
MEDIUM 4.3
Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a craft… |
|
CVE-2023-1224
MEDIUM 4.3
Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a c… |
|
CVE-2023-1223
MEDIUM 4.3
Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafte… |
|
CVE-2023-1222
HIGH 8.8
Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
|
CVE-2023-1221
MEDIUM 4.3
Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious exten… |
|
CVE-2023-1220
HIGH 8.8
Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit h… |
|
CVE-2023-1219
HIGH 8.8
Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially explo… |
|
CVE-2023-1218
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
|
CVE-2023-1217
MEDIUM 6.5
Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process … |
|
CVE-2023-1216
HIGH 8.8
Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to … |
|
CVE-2023-1215
HIGH 8.8
Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.