Vulnerabilities
Tracked app vulnerabilities
6,380 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 6,380
- Actively exploited
- 33
- Publication window
- 2009-07-30 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-34480
MEDIUM 6.8
Scripting Engine Memory Corruption Vulnerability |
|
CVE-2021-38204
MEDIUM · vendor
drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) … |
|
CVE-2021-29969
MEDIUM 5.9
If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS ha… |
|
CVE-2021-30589
MEDIUM 4.3
Insufficient validation of untrusted input in Sharing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to bypass navigation restrictions via a… |
|
CVE-2021-30587
MEDIUM 4.3
Inappropriate implementation in Compositing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially spoof the contents of the Omnibox … |
|
CVE-2021-30584
MEDIUM 6.5
Incorrect security UI in Downloads in Google Chrome on Android prior to 92.0.4515.107 allowed a remote attacker to perform domain spoofing via a crafted HTML p… |
|
CVE-2021-30583
MEDIUM 6.5
Insufficient policy enforcement in image handling in iOS in Google Chrome on iOS prior to 92.0.4515.107 allowed a remote attacker to leak cross-origin data via… |
|
CVE-2021-30582
MEDIUM 6.5
Inappropriate implementation in Animation in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
|
CVE-2021-30580
MEDIUM 6.5
Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious appl… |
|
CVE-2021-36976
MEDIUM 6.5
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block). |
|
CVE-2021-36769
MEDIUM 5.3
A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the ser… |
|
CVE-2021-34466
MEDIUM 5.7
Windows Hello Security Feature Bypass Vulnerability |
|
CVE-2021-34457
MEDIUM 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2021-34454
MEDIUM 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2021-34448
Scripting Engine Memory Corruption Vulnerability |
|
CVE-2021-34447
MEDIUM 6.8
Windows MSHTML Platform Remote Code Execution Vulnerability |
|
CVE-2021-34444
MEDIUM 6.5
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2021-34440
MEDIUM 5.5
GDI+ Information Disclosure Vulnerability |
|
CVE-2021-34509
MEDIUM 5.5
Storage Spaces Controller Information Disclosure Vulnerability |
|
CVE-2021-34507
MEDIUM 6.5
Windows Remote Assistance Information Disclosure Vulnerability |
|
CVE-2021-34500
MEDIUM 6.3
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2021-34499
MEDIUM 6.5
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2021-34497
MEDIUM 6.8
Windows MSHTML Platform Remote Code Execution Vulnerability |
|
CVE-2021-34496
MEDIUM 5.5
Windows GDI Information Disclosure Vulnerability |
|
CVE-2021-34493
MEDIUM 6.7
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2021-34491
MEDIUM 5.5
Win32k Information Disclosure Vulnerability |
|
CVE-2021-33783
MEDIUM 6.5
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-33782
MEDIUM 5.5
Windows Authenticode Spoofing Vulnerability |
|
CVE-2021-33765
MEDIUM 6.2
Windows Installer Spoofing Vulnerability |
|
CVE-2021-33764
MEDIUM 5.9
Windows Key Distribution Center Information Disclosure Vulnerability |
|
CVE-2021-33763
MEDIUM 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2021-33760
MEDIUM 5.5
Media Foundation Information Disclosure Vulnerability |
|
CVE-2021-33757
MEDIUM 5.3
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability |
|
CVE-2021-33755
MEDIUM 6.3
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-33745
MEDIUM 6.5
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2021-33744
MEDIUM 5.3
Windows Secure Kernel Mode Security Feature Bypass Vulnerability |
|
CVE-2021-31961
MEDIUM 6.1
Windows InstallService Elevation of Privilege Vulnerability |
|
CVE-2021-29957
MEDIUM 4.3
If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indi… |
|
CVE-2021-29956
MEDIUM 4.3
OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master pass… |
|
CVE-2021-29951
MEDIUM 6.5
The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop th… |
|
CVE-2021-29945
MEDIUM 6.5
The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. *Note: This issue only affected x86-32… |
|
CVE-2021-23998
MEDIUM 6.5
Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. This vulnerability affects Firefox E… |
|
CVE-2021-23993
MEDIUM 6.5
An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a sub… |
|
CVE-2021-23992
MEDIUM 4.3
Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key,… |
|
CVE-2021-23991
MEDIUM 6.8
If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet b… |
|
CVE-2021-30540
MEDIUM 6.5
Incorrect security UI in payments in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform domain spoofing via a crafted HTML pag… |
|
CVE-2021-30539
MEDIUM 5.4
Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy v… |
|
CVE-2021-30538
MEDIUM 4.3
Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy v… |
|
CVE-2021-30537
MEDIUM 4.3
Insufficient policy enforcement in cookies in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass cookie policy via a crafted HTML page. |
|
CVE-2021-30534
MEDIUM 6.5
Insufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a craft… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.