Vulnerabilities
Tracked app vulnerabilities
18,214 CVEs affect a tracked app or OS (High, all platforms). 296 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,214
- Actively exploited
- 296
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-48384
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to int… |
|
CVE-2025-49711
HIGH 7.8
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-49705
HIGH 7.8
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
|
CVE-2025-49703
HIGH 7.8
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2025-49700
HIGH 7.8
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2025-49699
HIGH 7.0
+1
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-49698
HIGH 7.8
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2025-38236
HIGH 7.8
In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free i… |
|
CVE-2025-49753
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49744
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-49742
HIGH · vendor
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2025-49740
HIGH · vendor
Windows SmartScreen Security Feature Bypass Vulnerability |
|
CVE-2025-49733
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-49732
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-49730
HIGH · vendor
Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49729
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49727
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-49726
HIGH · vendor
Windows Notification Elevation of Privilege Vulnerability |
|
CVE-2025-49725
HIGH · vendor
Windows Notification Elevation of Privilege Vulnerability |
|
CVE-2025-49724
HIGH · vendor
Windows Connected Devices Platform Service Remote Code Execution Vulnerability |
|
CVE-2025-49723
HIGH · vendor
Windows StateRepository API Server file Tampering Vulnerability |
|
CVE-2025-49722
HIGH · vendor
Windows Print Spooler Denial of Service Vulnerability |
|
CVE-2025-49721
HIGH · vendor
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49716
HIGH · vendor
Windows Netlogon Denial of Service Vulnerability |
|
CVE-2025-49694
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-49693
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-49691
HIGH · vendor
Windows Miracast Wireless Display Remote Code Execution Vulnerability |
|
CVE-2025-49690
HIGH · vendor
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability |
|
CVE-2025-49689
HIGH · vendor
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2025-49688
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49687
HIGH · vendor
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability |
|
CVE-2025-49686
HIGH · vendor
Windows TCP/IP Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49685
HIGH · vendor
Windows Search Service Elevation of Privilege Vulnerability |
|
CVE-2025-49684
HIGH · vendor
Windows Storage Port Driver Information Disclosure Vulnerability |
|
CVE-2025-49683
HIGH · vendor
Microsoft Virtual Hard Disk Remote Code Execution Vulnerability |
|
CVE-2025-49682
HIGH · vendor
Windows Media Elevation of Privilege Vulnerability |
|
CVE-2025-49681
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-49680
HIGH · vendor
Windows Performance Recorder (WPR) Denial of Service Vulnerability |
|
CVE-2025-49679
HIGH · vendor
Windows Shell Elevation of Privilege Vulnerability |
|
CVE-2025-49678
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-49677
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-49676
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49675
HIGH · vendor
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49674
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49673
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49672
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49671
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-49670
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49669
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49668
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.