Vulnerabilities
Tracked app vulnerabilities
7,770 CVEs affect a tracked app or OS (all severities, Windows). 214 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 7,770
- Actively exploited
- 214
- Publication window
- 2007-08-28 → 2026-08-19
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-38004
HIGH 7.8
Windows Fax Service Remote Code Execution Vulnerability |
|
CVE-2022-37969
HIGH 7.8
KEV
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2022-37959
HIGH 6.5
Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability |
|
CVE-2022-37958
CRITICAL 8.1
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
|
CVE-2022-37957
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37956
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37955
HIGH 7.8
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2022-37954
HIGH 7.8
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-35841
HIGH 8.8
Windows Enterprise App Management Service Remote Code Execution Vulnerability |
|
CVE-2022-35840
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35838
HIGH 7.5
HTTP V3 Denial of Service Vulnerability |
|
CVE-2022-35837
HIGH 6.5
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-35836
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35835
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35834
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35833
HIGH 7.5
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-35832
HIGH 5.5
Windows Event Tracing Denial of Service Vulnerability |
|
CVE-2022-35831
HIGH 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2022-35830
HIGH 8.1
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2022-35803
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2022-34734
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34733
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-34732
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34731
HIGH 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-34730
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34729
HIGH 7.8
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2022-34728
HIGH 5.5
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-34727
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34726
HIGH 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34725
HIGH 7.0
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-34724
HIGH 7.5
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2022-34723
HIGH 5.5
Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability |
|
CVE-2022-34722
CRITICAL 9.8
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
|
CVE-2022-34721
CRITICAL 9.8
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
|
CVE-2022-34720
HIGH 7.5
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
|
CVE-2022-34719
HIGH 7.8
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
|
CVE-2022-34718
CRITICAL 9.8
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2022-33679
HIGH 8.1
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2022-33647
HIGH 8.1
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2022-30200
HIGH 7.8
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-30196
HIGH 8.2
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-30170
HIGH 7.3
Windows Credential Roaming Service Elevation of Privilege Vulnerability |
|
CVE-2022-26928
HIGH 7.0
Windows Photo Import API Elevation of Privilege Vulnerability |
|
CVE-2020-35538
HIGH 5.5
Microsoft Security Update Guide entry — NVD enrichira. |
|
CVE-2020-10735
HIGH 7.5
1 app
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an i… |
|
CVE-2021-4189
MEDIUM 5.3
1 app
A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the … |
|
CVE-2021-28861
HIGH 7.4
1 app
Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path whic… |
|
CVE-2022-35822
HIGH 7.1
Windows Defender Credential Guard Security Feature Bypass Vulnerability |
|
CVE-2022-35820
HIGH 7.8
Windows Bluetooth Driver Elevation of Privilege Vulnerability |
|
CVE-2022-35804
CRITICAL 8.8
SMB Client and Server Remote Code Execution Vulnerability |