Vulnerabilities

Tracked app vulnerabilities

18,849 CVEs affect a tracked app or OS (all severities, Windows). 305 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 18,849
Actively exploited: 305
Publication window: 2004-07-27 → 2026-11-11

All CVEs 18,849 CISA KEV 305 Public exploit 428 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,849 entries Windows Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2021-24069 HIGH 7.8 2021-02-25 Microsoft Excel Remote Code Execution Vulnerability	HIGH 7.8	—		2021-02-25
CVE-2021-24068 HIGH 7.8 2021-02-25 Microsoft Excel Remote Code Execution Vulnerability	HIGH 7.8	—		2021-02-25
CVE-2021-24067 HIGH 7.8 2021-02-25 Microsoft Excel Remote Code Execution Vulnerability	HIGH 7.8	—		2021-02-25
CVE-2021-1732 HIGH 7.8 KEV Windows 2021-02-25 Windows Win32k Elevation of Privilege Vulnerability	HIGH 7.8	KEV	Windows	2021-02-25
CVE-2021-21157 HIGH 8.8 2021-02-22 Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted H…	HIGH 8.8	—		2021-02-22
CVE-2021-21156 HIGH 8.8 2021-02-22 Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script.	HIGH 8.8	—		2021-02-22
CVE-2021-21155 CRITICAL 9.6 2021-02-22 Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to pote…	CRITICAL 9.6	—		2021-02-22
CVE-2021-21154 CRITICAL 9.6 2021-02-22 Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially per…	CRITICAL 9.6	—		2021-02-22
CVE-2021-21153 HIGH 8.8 2021-02-22 Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory acc…	HIGH 8.8	—		2021-02-22
CVE-2021-21152 HIGH 8.8 2021-02-22 Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted H…	HIGH 8.8	—		2021-02-22
CVE-2021-21151 CRITICAL 9.6 2021-02-22 Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.	CRITICAL 9.6	—		2021-02-22
CVE-2021-21150 CRITICAL 9.6 2021-02-22 Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentiall…	CRITICAL 9.6	—		2021-02-22
CVE-2021-21149 HIGH 8.8 2021-02-22 Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a …	HIGH 8.8	—		2021-02-22
CVE-2021-23336 MEDIUM 5.9 2021-02-15 The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to W…	MEDIUM 5.9	—		2021-02-15
CVE-2021-21148 HIGH 8.8 KEV 2021-02-09 Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	KEV		2021-02-09
CVE-2021-21147 MEDIUM 4.3 2021-02-09 Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a craf…	MEDIUM 4.3	—		2021-02-09
CVE-2021-21146 CRITICAL 9.6 2021-02-09 Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21145 HIGH 8.8 2021-02-09 Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-02-09
CVE-2021-21144 HIGH 8.8 2021-02-09 Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potenti…	HIGH 8.8	—		2021-02-09
CVE-2021-21143 HIGH 8.8 2021-02-09 Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potenti…	HIGH 8.8	—		2021-02-09
CVE-2021-21142 CRITICAL 9.6 2021-02-09 Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21141 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a craft…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21140 MEDIUM 6.8 2021-02-09 Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB devic…	MEDIUM 6.8	—		2021-02-09
CVE-2021-21139 MEDIUM 6.5 2021-02-09 Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21138 HIGH 8.6 2021-02-09 Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file.	HIGH 8.6	—		2021-02-09
CVE-2021-21137 MEDIUM 6.5 2021-02-09 Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21136 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted …	MEDIUM 6.5	—		2021-02-09
CVE-2021-21135 MEDIUM 6.5 2021-02-09 Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML p…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21134 MEDIUM 6.5 2021-02-09 Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.	MEDIUM 6.5	—		2021-02-09
CVE-2021-21133 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass naviga…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21132 CRITICAL 9.6 2021-02-09 Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21131 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21130 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21129 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21128 HIGH 8.8 2021-02-09 Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-02-09
CVE-2021-21127 HIGH 8.8 2021-02-09 Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted …	HIGH 8.8	—		2021-02-09
CVE-2021-21126 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Ex…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21125 HIGH 8.1 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restriction…	HIGH 8.1	—		2021-02-09
CVE-2021-21124 CRITICAL 9.6 2021-02-09 Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox esc…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21123 MEDIUM 6.5 2021-02-09 Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafte…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21122 HIGH 8.8 2021-02-09 Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-02-09
CVE-2021-21121 CRITICAL 9.6 2021-02-09 Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21120 HIGH 8.8 2021-02-09 Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-02-09
CVE-2021-21119 HIGH 8.8 2021-02-09 Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c…	HIGH 8.8	—		2021-02-09
CVE-2021-21118 HIGH 8.8 2021-02-09 Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a cr…	HIGH 8.8	—		2021-02-09
CVE-2021-21117 HIGH 7.8 2021-02-09 Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a cr…	HIGH 7.8	—		2021-02-09
CVE-2020-16044 HIGH 8.8 2021-02-09 Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.	HIGH 8.8	—		2021-02-09
CVE-2021-25195 HIGH · vendor Windows 2021-02-09 Windows PKU2U Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24106 HIGH · vendor Windows 2021-02-09 Windows DirectX Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24103 HIGH · vendor Windows 2021-02-09 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-02-09

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM