Vulnerabilities
Tracked app vulnerabilities
18,849 CVEs affect a tracked app or OS (all severities, Windows). 305 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,849
- Actively exploited
- 305
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-0996
MEDIUM 5.4
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (U… |
|
CVE-2025-0995
HIGH 8.8
Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2025-21394
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21391
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2025-21390
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21387
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21386
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21383
HIGH 7.8
Microsoft Excel Information Disclosure Vulnerability |
|
CVE-2025-21381
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21420
HIGH · vendor
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability |
|
CVE-2025-21419
HIGH · vendor
Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
|
CVE-2025-21418
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-21414
HIGH · vendor
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2025-21410
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-21407
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21406
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21379
CRITICAL · vendor
DHCP Client Service Remote Code Execution Vulnerability |
|
CVE-2025-21377
HIGH · vendor
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-21376
CRITICAL · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2025-21375
HIGH · vendor
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-21373
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21371
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21369
HIGH · vendor
Microsoft Digest Authentication Remote Code Execution Vulnerability |
|
CVE-2025-21368
HIGH · vendor
Microsoft Digest Authentication Remote Code Execution Vulnerability |
|
CVE-2025-21367
HIGH · vendor
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2025-21359
HIGH · vendor
Windows Kernel Security Feature Bypass Vulnerability |
|
CVE-2025-21358
HIGH · vendor
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2025-21352
HIGH · vendor
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21351
HIGH · vendor
Windows Active Directory Domain Services API Denial of Service Vulnerability |
|
CVE-2025-21350
HIGH · vendor
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2025-21349
HIGH · vendor
Windows Remote Desktop Configuration Service Tampering Vulnerability |
|
CVE-2025-21347
HIGH · vendor
Windows Deployment Services Denial of Service Vulnerability |
|
CVE-2025-21337
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-21254
HIGH · vendor
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21216
HIGH · vendor
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21212
HIGH · vendor
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21208
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-21201
HIGH · vendor
Windows Telephony Server Remote Code Execution Vulnerability |
|
CVE-2025-21200
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21190
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21184
HIGH · vendor
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2025-21183
HIGH · vendor
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
|
CVE-2025-21182
HIGH · vendor
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
|
CVE-2025-21181
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21179
HIGH · vendor
DHCP Client Service Denial of Service Vulnerability |
|
CVE-2025-0451
MEDIUM 6.3
Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI … |
|
CVE-2025-0445
MEDIUM 5.4
Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2025-0444
MEDIUM 6.3
Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
|
CVE-2025-1020
CRITICAL 9.8
Memory safety bugs present in Firefox 134 and Thunderbird 134. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s… |
|
CVE-2025-1019
MEDIUM 4.3
The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. … |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.