Vulnerabilities
Tracked app vulnerabilities
27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,728
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-27469
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2025-26688
HIGH · vendor
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2025-26686
CRITICAL · vendor
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2025-26681
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-26680
HIGH · vendor
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-26679
HIGH · vendor
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability |
|
CVE-2025-26678
HIGH · vendor
Windows Defender Application Control Security Feature Bypass Vulnerability |
|
CVE-2025-26676
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-26675
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2025-26674
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-26673
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2025-26672
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-26671
HIGH · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-26670
CRITICAL · vendor
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability |
|
CVE-2025-26669
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-26668
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-26667
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-26666
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-26665
HIGH · vendor
Windows upnphost.dll Elevation of Privilege Vulnerability |
|
CVE-2025-26664
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-26663
CRITICAL · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2025-26652
HIGH · vendor
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-26651
HIGH · vendor
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2025-26649
HIGH · vendor
Windows Secure Channel Elevation of Privilege Vulnerability |
|
CVE-2025-26648
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-26647
HIGH · vendor
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2025-26644
HIGH · vendor
Windows Hello Spoofing Vulnerability |
|
CVE-2025-26641
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-26640
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-26639
HIGH · vendor
Windows USB Print Driver Elevation of Privilege Vulnerability |
|
CVE-2025-26637
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-26635
HIGH · vendor
Windows Hello Security Feature Bypass Vulnerability |
|
CVE-2025-24074
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-24073
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-24062
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-24060
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-24058
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-21222
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21221
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21205
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21204
HIGH · vendor
Windows Process Activation Elevation of Privilege Vulnerability |
|
CVE-2025-21203
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-21197
HIGH · vendor
Windows NTFS Information Disclosure Vulnerability |
|
CVE-2025-21191
HIGH · vendor
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
|
CVE-2025-21174
HIGH · vendor
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-29796
MEDIUM 4.7
User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. |
|
CVE-2025-25001
MEDIUM 4.3
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perf… |
|
CVE-2025-31334
MEDIUM 6.8
Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR v… |
|
CVE-2025-3074
MEDIUM 5.4
Inappropriate implementation in Downloads in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Ch… |
|
CVE-2025-3073
MEDIUM 5.4
Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestur… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.