Vulnerabilities
Tracked app vulnerabilities
27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,728
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-32704
HIGH 8.4
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-30388
HIGH · vendor
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally. |
|
CVE-2025-30386
CRITICAL · vendor
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-30383
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-30381
HIGH 7.8
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-30379
HIGH 7.8
Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-30377
HIGH 8.4
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
|
CVE-2025-30376
HIGH 7.8
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-30375
HIGH 7.8
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-29979
HIGH 7.8
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-29977
HIGH 7.8
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-32709
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-32707
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-32706
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-32701
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-30400
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-30397
Scripting Engine Memory Corruption Vulnerability |
|
CVE-2025-30394
HIGH · vendor
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2025-30385
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2025-29974
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-29971
HIGH · vendor
Web Threat Defense (WTD.sys) Denial of Service Vulnerability |
|
CVE-2025-29970
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-29969
HIGH · vendor
MS-EVEN RPC Remote Code Execution Vulnerability |
|
CVE-2025-29968
HIGH · vendor
Active Directory Certificate Services (AD CS) Denial of Service Vulnerability |
|
CVE-2025-29967
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-29966
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-29964
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-29963
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-29962
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-29961
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29960
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29959
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29958
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29957
HIGH · vendor
Windows Deployment Services Denial of Service Vulnerability |
|
CVE-2025-29956
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2025-29955
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2025-29954
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2025-29842
HIGH · vendor
UrlMon Security Feature Bypass Vulnerability |
|
CVE-2025-29841
HIGH · vendor
Universal Print Management Service Elevation of Privilege Vulnerability |
|
CVE-2025-29840
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-29839
HIGH · vendor
Windows Multiple UNC Provider Driver Information Disclosure Vulnerability |
|
CVE-2025-29838
HIGH · vendor
Windows ExecutionContext Driver Elevation of Privilege Vulnerability |
|
CVE-2025-29837
HIGH · vendor
Windows Installer Information Disclosure Vulnerability |
|
CVE-2025-29836
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29835
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2025-29833
CRITICAL · vendor
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability |
|
CVE-2025-29832
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29831
HIGH · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-29830
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-29829
HIGH · vendor
Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.