High-risk security vulnerabilities in apps

[PeterJon]

What are the high-risk or exploitable security vulnerabilities in APP? Have any experts done research or compilation in this field? I hope someone can share relevant information.

[jackyjask]

Have you checked Mitre Matrices?

https://attack.mitre.org/matrices/enterprise/windows/

 

[Luca91]

https://book.hacktricks.xyz/ is also a great resource about binary exploitation etc.

As for recent (~5 years ago) big exploits, I think BlueKeep was quite dangerous. Or a more recent (~3 years ago) is Log4Shell (CVE-2021-44228).

The truth is... vulnerabilities are present in almost every app... just waiting for some skilled reverse engineer to discover them!