Vulnerabilities

Tracked app vulnerabilities

2,721 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 2,721
Actively exploited: 48
Publication window: 2007-08-28 → 2026-11-10

All CVEs 2,721 CISA KEV 48 Public exploit 56 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

2,721 entries Critical Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2022-20127 CRITICAL · vendor Android 2022-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-06-01
CVE-2022-26937 CRITICAL · vendor Windows 2022-05-10 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-05-10
CVE-2022-26923 CRITICAL · vendor KEV Windows 2022-05-10 Active Directory Domain Services Elevation of Privilege Vulnerability	CRITICAL · vendor	KEV	Windows	2022-05-10
CVE-2022-23270 CRITICAL · vendor Windows 2022-05-10 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-05-10
CVE-2022-22017 CRITICAL · vendor Windows 2022-05-10 Remote Desktop Client Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-05-10
CVE-2022-21972 CRITICAL · vendor Windows 2022-05-10 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-05-10
CVE-2021-35090 CRITICAL · vendor Android 2022-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-05-01
CVE-2022-26919 CRITICAL · vendor Windows 2022-04-12 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-26809 CRITICAL · vendor Windows 2022-04-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-24541 CRITICAL · vendor Windows 2022-04-12 Windows Server Service Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-24537 CRITICAL · vendor Windows 2022-04-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-24500 CRITICAL · vendor Windows 2022-04-12 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-24497 CRITICAL · vendor Windows 2022-04-12 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-24491 CRITICAL · vendor Windows 2022-04-12 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-23257 CRITICAL · vendor Windows 2022-04-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-22008 CRITICAL · vendor Windows 2022-04-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-0790 CRITICAL 9.6 2022-04-05 Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to poten…	CRITICAL 9.6	—		2022-04-05
CVE-2022-0466 CRITICAL 9.6 2022-04-05 Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious exte…	CRITICAL 9.6	—		2022-04-05
CVE-2022-0452 CRITICAL 9.6 2022-04-05 Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag…	CRITICAL 9.6	—		2022-04-05
CVE-2021-35123 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-35112 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-35104 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-35081 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-30347 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-30343 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-30342 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-30341 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-30339 CRITICAL · vendor Android 2022-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-04-01
CVE-2021-39708 CRITICAL · vendor Android 2022-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-03-01
CVE-2021-35110 CRITICAL · vendor Android 2022-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-03-01
CVE-2021-1942 CRITICAL · vendor Android 2022-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-03-01
CVE-2022-0290 CRITICAL 9.6 2022-02-12 Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pa…	CRITICAL 9.6	—		2022-02-12
CVE-2022-0097 CRITICAL 9.6 2022-02-12 Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to…	CRITICAL 9.6	—		2022-02-12
CVE-2021-24043 CRITICAL 9.1 2022-02-02 A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.…	CRITICAL 9.1	—		2022-02-02
CVE-2021-39675 CRITICAL · vendor Android 2022-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-02-01
CVE-2021-30317 CRITICAL · vendor Android 2022-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-02-01
CVE-2022-23852 CRITICAL 9.8 Android 2022-01-24 Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.	CRITICAL 9.8	—	Android	2022-01-24
CVE-2022-21912 CRITICAL · vendor Windows 2022-01-11 DirectX Graphics Kernel Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21907 CRITICAL · vendor Windows 2022-01-11 HTTP Protocol Stack Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21898 CRITICAL · vendor Windows 2022-01-11 DirectX Graphics Kernel Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21857 CRITICAL · vendor Windows 2022-01-11 Active Directory Domain Services Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21833 CRITICAL · vendor Windows 2022-01-11 Virtual Machine IDE Drive Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-22822 CRITICAL 9.8 Android 2022-01-10 addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.	CRITICAL 9.8	—	Android	2022-01-10
CVE-2021-24042 CRITICAL 9.8 2022-01-04 The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Bu…	CRITICAL 9.8	—		2022-01-04
CVE-2021-30285 CRITICAL · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-01-01
CVE-2021-38013 CRITICAL 9.6 2021-12-23 Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI render…	CRITICAL 9.6	—		2021-12-23
CVE-2021-43233 CRITICAL · vendor Windows 2021-12-14 Remote Desktop Client Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-12-14
CVE-2021-43217 CRITICAL · vendor Windows 2021-12-14 Windows Encrypting File System (EFS) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-12-14
CVE-2021-43215 CRITICAL · vendor Windows 2021-12-14 iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution	CRITICAL · vendor	—	Windows	2021-12-14
CVE-2021-44228 CRITICAL 10.0 KEV Xcode 2021-12-10 Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameter…	CRITICAL 10.0	KEV	Xcode	2021-12-10

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM