Vulnerabilities
Tracked app vulnerabilities
18,214 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,214
- Actively exploited
- 296
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-11720
HIGH 8.1
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted… |
|
CVE-2025-11715
HIGH 8.8
Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruptio… |
|
CVE-2025-11714
HIGH 8.8
Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence… |
|
CVE-2025-11713
HIGH 8.1
Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the app… |
|
CVE-2025-59295
HIGH · vendor
Windows URL Parsing Remote Code Execution Vulnerability |
|
CVE-2025-59294
HIGH · vendor
Windows Taskbar Live Preview Information Disclosure Vulnerability |
|
CVE-2025-59290
HIGH · vendor
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-59289
HIGH · vendor
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-59282
HIGH · vendor
Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-59280
HIGH · vendor
Windows SMB Client Tampering Vulnerability |
|
CVE-2025-59278
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-59277
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-59275
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-59261
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-59260
HIGH · vendor
Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability |
|
CVE-2025-59259
HIGH · vendor
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2025-59258
HIGH · vendor
Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability |
|
CVE-2025-59255
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-59254
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-59253
HIGH · vendor
Windows Search Service Denial of Service Vulnerability |
|
CVE-2025-59244
HIGH · vendor
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-59242
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-59230
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2025-59214
HIGH · vendor
Microsoft Windows File Explorer Spoofing Vulnerability |
|
CVE-2025-59211
HIGH · vendor
Windows Push Notification Information Disclosure Vulnerability |
|
CVE-2025-59209
HIGH · vendor
Windows Push Notification Information Disclosure Vulnerability |
|
CVE-2025-59208
HIGH · vendor
Windows MapUrlToZone Information Disclosure Vulnerability |
|
CVE-2025-59207
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59205
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-59204
HIGH · vendor
Windows Management Services Information Disclosure Vulnerability |
|
CVE-2025-59203
HIGH · vendor
Windows State Repository API Server File Information Disclosure Vulnerability |
|
CVE-2025-59202
HIGH · vendor
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2025-59201
HIGH · vendor
Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability |
|
CVE-2025-59200
HIGH · vendor
Data Sharing Service Spoofing Vulnerability |
|
CVE-2025-59199
HIGH · vendor
Software Protection Platform (SPP) Elevation of Privilege Vulnerability |
|
CVE-2025-59198
HIGH · vendor
Windows Search Service Denial of Service Vulnerability |
|
CVE-2025-59197
HIGH · vendor
Windows ETL Channel Information Disclosure Vulnerability |
|
CVE-2025-59196
HIGH · vendor
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
|
CVE-2025-59195
HIGH · vendor
Windows Graphics Component Denial of Service Vulnerability |
|
CVE-2025-59194
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59193
HIGH · vendor
Windows Management Services Elevation of Privilege Vulnerability |
|
CVE-2025-59192
HIGH · vendor
Storport.sys Driver Elevation of Privilege Vulnerability |
|
CVE-2025-59191
HIGH · vendor
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2025-59190
HIGH · vendor
Windows Search Service Denial of Service Vulnerability |
|
CVE-2025-59188
HIGH · vendor
Microsoft Failover Cluster Information Disclosure Vulnerability |
|
CVE-2025-59187
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59186
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-59185
HIGH · vendor
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-59184
HIGH · vendor
Storage Spaces Direct Information Disclosure Vulnerability |
|
CVE-2025-58739
HIGH · vendor
Microsoft Windows File Explorer Spoofing Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.