Vulnerabilities

Tracked app vulnerabilities

7,750 CVEs affect a tracked app or OS (all severities, Windows). 213 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 7,750
Actively exploited: 213
Publication window: 2007-08-28 → 2026-08-19

All CVEs 7,750 CISA KEV 213 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

7,750 entries Windows Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2021-28338 CRITICAL 8.8 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	2021-04-13
CVE-2021-28337 CRITICAL 8.8 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	2021-04-13
CVE-2021-28336 CRITICAL 8.8 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	2021-04-13
CVE-2021-28335 CRITICAL 8.8 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	2021-04-13
CVE-2021-28334 CRITICAL 8.8 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	2021-04-13
CVE-2021-28333 CRITICAL 8.8 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	2021-04-13
CVE-2021-28332 CRITICAL 8.8 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	2021-04-13
CVE-2021-28331 CRITICAL 8.8 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	2021-04-13
CVE-2021-28330 CRITICAL 8.8 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	2021-04-13
CVE-2021-28329 CRITICAL 8.8 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	2021-04-13
CVE-2021-28328 HIGH 6.5 2021-04-13 Windows DNS Information Disclosure Vulnerability	HIGH 6.5	—	—	2021-04-13
CVE-2021-28327 HIGH 8.8 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	HIGH 8.8	—	—	2021-04-13
CVE-2021-28326 HIGH 5.5 2021-04-13 Windows AppX Deployment Server Denial of Service Vulnerability	HIGH 5.5	—	—	2021-04-13
CVE-2021-28325 HIGH 6.5 2021-04-13 Windows SMB Information Disclosure Vulnerability	HIGH 6.5	—	—	2021-04-13
CVE-2021-28324 HIGH 7.5 2021-04-13 Windows SMB Information Disclosure Vulnerability	HIGH 7.5	—	—	2021-04-13
CVE-2021-28323 HIGH 6.5 2021-04-13 Windows DNS Information Disclosure Vulnerability	HIGH 6.5	—	—	2021-04-13
CVE-2021-28322 HIGH 7.8 2021-04-13 Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2021-04-13
CVE-2021-28321 HIGH 7.8 2021-04-13 Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2021-04-13
CVE-2021-28320 HIGH 7.8 2021-04-13 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2021-04-13
CVE-2021-28319 HIGH 7.5 2021-04-13 Windows TCP/IP Driver Denial of Service Vulnerability	HIGH 7.5	—	—	2021-04-13
CVE-2021-28318 HIGH 5.5 2021-04-13 Windows GDI+ Information Disclosure Vulnerability	HIGH 5.5	—	—	2021-04-13
CVE-2021-28317 HIGH 5.5 2021-04-13 Microsoft Windows Codecs Library Information Disclosure Vulnerability	HIGH 5.5	—	—	2021-04-13
CVE-2021-28316 HIGH 4.2 2021-04-13 Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability	HIGH 4.2	—	—	2021-04-13
CVE-2021-28315 CRITICAL 7.8 2021-04-13 Windows Media Video Decoder Remote Code Execution Vulnerability	CRITICAL 7.8	—	—	2021-04-13
CVE-2021-28314 HIGH 7.8 2021-04-13 Windows Hyper-V Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2021-04-13
CVE-2021-28313 HIGH 7.8 2021-04-13 Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2021-04-13
CVE-2021-28312 MEDIUM 3.3 2021-04-13 Windows NTFS Denial of Service Vulnerability	MEDIUM 3.3	—	—	2021-04-13
CVE-2021-28311 HIGH 6.5 2021-04-13 Windows Application Compatibility Cache Denial of Service Vulnerability	HIGH 6.5	—	—	2021-04-13
CVE-2021-28310 HIGH 7.8 KEV 2021-04-13 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	KEV	—	2021-04-13
CVE-2021-28309 HIGH 5.5 2021-04-13 Windows Kernel Information Disclosure Vulnerability	HIGH 5.5	—	—	2021-04-13
CVE-2021-27096 HIGH 7.8 2021-04-13 NTFS Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2021-04-13
CVE-2021-27095 CRITICAL 7.8 2021-04-13 Windows Media Video Decoder Remote Code Execution Vulnerability	CRITICAL 7.8	—	—	2021-04-13
CVE-2021-27094 HIGH 4.4 2021-04-13 Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability	HIGH 4.4	—	—	2021-04-13
CVE-2021-27093 HIGH 5.5 2021-04-13 Windows Kernel Information Disclosure Vulnerability	HIGH 5.5	—	—	2021-04-13
CVE-2021-27092 HIGH 6.8 2021-04-13 Azure AD Web Sign-in Security Feature Bypass Vulnerability	HIGH 6.8	—	—	2021-04-13
CVE-2021-27090 HIGH 7.8 2021-04-13 Windows Secure Kernel Mode Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2021-04-13
CVE-2021-27089 HIGH 7.8 2021-04-13 Microsoft Internet Messaging API Remote Code Execution Vulnerability	HIGH 7.8	—	—	2021-04-13
CVE-2021-27088 HIGH 7.8 2021-04-13 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2021-04-13
CVE-2021-27086 HIGH 7.8 2021-04-13 Windows Services and Controller App Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2021-04-13
CVE-2021-27079 HIGH 5.7 2021-04-13 Windows Media Photo Codec Information Disclosure Vulnerability	HIGH 5.7	—	—	2021-04-13
CVE-2021-27072 HIGH 7.0 2021-04-13 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2021-04-13
CVE-2021-26417 HIGH 5.5 2021-04-13 Windows Overlay Filter Information Disclosure Vulnerability	HIGH 5.5	—	—	2021-04-13
CVE-2021-26416 HIGH 7.7 2021-04-13 Windows Hyper-V Denial of Service Vulnerability	HIGH 7.7	—	—	2021-04-13
CVE-2021-26415 HIGH 7.8 2021-04-13 Windows Installer Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2021-04-13
CVE-2021-26413 HIGH 6.2 2021-04-13 Windows Installer Spoofing Vulnerability	HIGH 6.2	—	—	2021-04-13
CVE-2021-23987 HIGH 8.8 1 app 2021-03-31 Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory c…	HIGH 8.8	—	Mozilla Thunderbird	2021-03-31
CVE-2021-23984 MEDIUM 6.5 1 app 2021-03-31 A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, …	MEDIUM 6.5	—	Mozilla Thunderbird	2021-03-31
CVE-2021-23982 MEDIUM 6.5 1 app 2021-03-31 Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on …	MEDIUM 6.5	—	Mozilla Thunderbird	2021-03-31
CVE-2021-23981 HIGH 8.1 1 app 2021-03-31 A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a…	HIGH 8.1	—	Mozilla Thunderbird	2021-03-31
CVE-2020-7463 MEDIUM 5.5 1 app 2021-03-26 In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handli…	MEDIUM 5.5	—	iTunes	2021-03-26