Vulnerabilities
Tracked app vulnerabilities
18,849 CVEs affect a tracked app or OS (all severities, Windows). 305 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,849
- Actively exploited
- 305
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-28331
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28330
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28329
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28328
HIGH · vendor
Windows DNS Information Disclosure Vulnerability |
|
CVE-2021-28327
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28326
HIGH · vendor
Windows AppX Deployment Server Denial of Service Vulnerability |
|
CVE-2021-28325
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-28324
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-28323
HIGH · vendor
Windows DNS Information Disclosure Vulnerability |
|
CVE-2021-28322
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28321
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28320
HIGH · vendor
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
|
CVE-2021-28319
HIGH · vendor
Windows TCP/IP Driver Denial of Service Vulnerability |
|
CVE-2021-28318
HIGH · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2021-28317
HIGH · vendor
Microsoft Windows Codecs Library Information Disclosure Vulnerability |
|
CVE-2021-28316
HIGH · vendor
Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability |
|
CVE-2021-28315
CRITICAL · vendor
Windows Media Video Decoder Remote Code Execution Vulnerability |
|
CVE-2021-28314
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2021-28313
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28312
MEDIUM · vendor
Windows NTFS Denial of Service Vulnerability |
|
CVE-2021-28311
HIGH · vendor
Windows Application Compatibility Cache Denial of Service Vulnerability |
|
CVE-2021-28310
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-28309
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2021-27096
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-27095
CRITICAL · vendor
Windows Media Video Decoder Remote Code Execution Vulnerability |
|
CVE-2021-27094
HIGH · vendor
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability |
|
CVE-2021-27093
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2021-27092
HIGH · vendor
Azure AD Web Sign-in Security Feature Bypass Vulnerability |
|
CVE-2021-27090
HIGH · vendor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2021-27089
HIGH · vendor
Microsoft Internet Messaging API Remote Code Execution Vulnerability |
|
CVE-2021-27088
HIGH · vendor
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-27086
HIGH · vendor
Windows Services and Controller App Elevation of Privilege Vulnerability |
|
CVE-2021-27079
HIGH · vendor
Windows Media Photo Codec Information Disclosure Vulnerability |
|
CVE-2021-27072
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-26417
HIGH · vendor
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2021-26416
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-26415
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2021-26413
HIGH · vendor
Windows Installer Spoofing Vulnerability |
|
CVE-2021-21199
HIGH 8.8
Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially explo… |
|
CVE-2021-21198
HIGH 7.4
Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
|
CVE-2021-21197
HIGH 8.8
Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2021-21196
HIGH 8.8
Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a craf… |
|
CVE-2021-21195
HIGH 8.8
Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21194
HIGH 8.8
Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2021-23987
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory c… |
|
CVE-2021-23984
MEDIUM 6.5
A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, … |
|
CVE-2021-23982
MEDIUM 6.5
Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on … |
|
CVE-2021-23981
HIGH 8.1
A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a… |
|
CVE-2020-7463
MEDIUM 5.5
In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handli… |
|
CVE-2021-21193
HIGH 8.8
KEV
Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.