Vulnerabilities

Tracked app vulnerabilities

2,721 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 2,721
Actively exploited: 48
Publication window: 2007-08-28 → 2026-11-10

All CVEs 2,721 CISA KEV 48 Public exploit 56 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

2,721 entries Critical Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2022-30198 CRITICAL · vendor Windows 2022-10-11 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-10-11
CVE-2022-24504 CRITICAL · vendor Windows 2022-10-11 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-10-11
CVE-2022-22035 CRITICAL · vendor Windows 2022-10-11 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-10-11
CVE-2022-25748 CRITICAL · vendor Android 2022-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-10-01
CVE-2022-25720 CRITICAL · vendor Android 2022-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-10-01
CVE-2022-25718 CRITICAL · vendor Android 2022-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-10-01
CVE-2022-20419 CRITICAL · vendor Android 2022-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-10-01
CVE-2022-3075 CRITICAL 9.6 KEV 2022-09-26 Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially…	CRITICAL 9.6	KEV		2022-09-26
CVE-2022-36934 CRITICAL 9.8 2022-09-22 An integer overflow in WhatsApp could result in remote code execution in an established video call.	CRITICAL 9.8	—		2022-09-22
CVE-2022-34718 CRITICAL 9.8 Windows 2022-09-13 Windows TCP/IP Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2022-09-13
CVE-2022-37958 CRITICAL · vendor Windows 2022-09-13 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-09-13
CVE-2022-34722 CRITICAL · vendor Windows 2022-09-13 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-09-13
CVE-2022-34721 CRITICAL · vendor Windows 2022-09-13 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-09-13
CVE-2022-25708 CRITICAL · vendor Android 2022-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-09-01
CVE-2022-2587 CRITICAL 9.8 2022-08-12 Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corru…	CRITICAL 9.8	—		2022-08-12
CVE-2022-28755 CRITICAL 9.6 2022-08-11 The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. If a malicious…	CRITICAL 9.6	—		2022-08-11
CVE-2022-35804 CRITICAL · vendor Windows 2022-08-09 SMB Client and Server Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-35794 CRITICAL · vendor Windows 2022-08-09 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-35767 CRITICAL · vendor Windows 2022-08-09 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-35766 CRITICAL · vendor Windows 2022-08-09 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-35753 CRITICAL · vendor Windows 2022-08-09 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-35752 CRITICAL · vendor Windows 2022-08-09 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-35745 CRITICAL · vendor Windows 2022-08-09 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-35744 CRITICAL · vendor Windows 2022-08-09 Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-34714 CRITICAL · vendor Windows 2022-08-09 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-34702 CRITICAL · vendor Windows 2022-08-09 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-34696 CRITICAL · vendor Windows 2022-08-09 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-34691 CRITICAL · vendor Windows 2022-08-09 Active Directory Domain Services Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-30133 CRITICAL · vendor Windows 2022-08-09 Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-08-09
CVE-2022-20345 CRITICAL · vendor Android 2022-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-08-01
CVE-2022-2010 CRITICAL 9.3 2022-07-28 Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer process to potentially pe…	CRITICAL 9.3	—		2022-07-28
CVE-2022-1853 CRITICAL 9.6 2022-07-27 Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.	CRITICAL 9.6	—		2022-07-27
CVE-2022-1312 CRITICAL 9.6 2022-07-25 Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed an attacker who convinced a user to install a malicious extension to potentially perf…	CRITICAL 9.6	—		2022-07-25
CVE-2022-1309 CRITICAL 9.6 2022-07-25 Insufficient policy enforcement in developer tools in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially perform a sandbox escape vi…	CRITICAL 9.6	—		2022-07-25
CVE-2022-0977 CRITICAL 9.6 2022-07-21 Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user inte…	CRITICAL 9.6	—		2022-07-21
CVE-2022-0973 CRITICAL 9.6 2022-07-21 Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CRITICAL 9.6	—		2022-07-21
CVE-2022-30221 CRITICAL · vendor Windows 2022-07-12 Windows Graphics Component Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-07-12
CVE-2022-22039 CRITICAL · vendor Windows 2022-07-12 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-07-12
CVE-2022-22038 CRITICAL · vendor Windows 2022-07-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-07-12
CVE-2022-22029 CRITICAL · vendor Windows 2022-07-12 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-07-12
CVE-2022-22096 CRITICAL · vendor Android 2022-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-07-01
CVE-2022-20229 CRITICAL · vendor Android 2022-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-07-01
CVE-2022-20222 CRITICAL · vendor Android 2022-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-07-01
CVE-2022-30163 CRITICAL · vendor Windows 2022-06-14 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-06-14
CVE-2022-30139 CRITICAL · vendor Windows 2022-06-14 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-06-14
CVE-2022-30136 CRITICAL · vendor Windows 2022-06-14 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-06-14
CVE-2022-20210 CRITICAL · vendor Android 2022-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-06-01
CVE-2022-20145 CRITICAL · vendor Android 2022-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-06-01
CVE-2022-20140 CRITICAL · vendor Android 2022-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-06-01
CVE-2022-20130 CRITICAL · vendor Android 2022-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-06-01

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM