Vulnerabilities
Tracked app vulnerabilities
6,362 CVEs affect a tracked app or OS (Medium, all platforms). 33 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 6,362
- Actively exploited
- 33
- Publication window
- 2009-07-30 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-34509
MEDIUM 5.5
Storage Spaces Controller Information Disclosure Vulnerability |
|
CVE-2021-34507
MEDIUM 6.5
Windows Remote Assistance Information Disclosure Vulnerability |
|
CVE-2021-34500
MEDIUM 6.3
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2021-34499
MEDIUM 6.5
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2021-34497
MEDIUM 6.8
Windows MSHTML Platform Remote Code Execution Vulnerability |
|
CVE-2021-34496
MEDIUM 5.5
Windows GDI Information Disclosure Vulnerability |
|
CVE-2021-34493
MEDIUM 6.7
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2021-34491
MEDIUM 5.5
Win32k Information Disclosure Vulnerability |
|
CVE-2021-33783
MEDIUM 6.5
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-33782
MEDIUM 5.5
Windows Authenticode Spoofing Vulnerability |
|
CVE-2021-33765
MEDIUM 6.2
Windows Installer Spoofing Vulnerability |
|
CVE-2021-33764
MEDIUM 5.9
Windows Key Distribution Center Information Disclosure Vulnerability |
|
CVE-2021-33763
MEDIUM 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2021-33760
MEDIUM 5.5
Media Foundation Information Disclosure Vulnerability |
|
CVE-2021-33757
MEDIUM 5.3
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability |
|
CVE-2021-33755
MEDIUM 6.3
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-33745
MEDIUM 6.5
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2021-33744
MEDIUM 5.3
Windows Secure Kernel Mode Security Feature Bypass Vulnerability |
|
CVE-2021-31961
MEDIUM 6.1
Windows InstallService Elevation of Privilege Vulnerability |
|
CVE-2021-29957
MEDIUM 4.3
If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indi… |
|
CVE-2021-29956
MEDIUM 4.3
OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master pass… |
|
CVE-2021-29951
MEDIUM 6.5
The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop th… |
|
CVE-2021-29945
MEDIUM 6.5
The WebAssembly JIT could miscalculate the size of a return type, which could lead to a null read and result in a crash. *Note: This issue only affected x86-32… |
|
CVE-2021-23998
MEDIUM 6.5
Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. This vulnerability affects Firefox E… |
|
CVE-2021-23993
MEDIUM 6.5
An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a sub… |
|
CVE-2021-23992
MEDIUM 4.3
Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key,… |
|
CVE-2021-23991
MEDIUM 6.8
If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet b… |
|
CVE-2021-30540
MEDIUM 6.5
Incorrect security UI in payments in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform domain spoofing via a crafted HTML pag… |
|
CVE-2021-30539
MEDIUM 5.4
Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy v… |
|
CVE-2021-30538
MEDIUM 4.3
Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy v… |
|
CVE-2021-30537
MEDIUM 4.3
Insufficient policy enforcement in cookies in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass cookie policy via a crafted HTML page. |
|
CVE-2021-30534
MEDIUM 6.5
Insufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a craft… |
|
CVE-2021-30533
MEDIUM 6.5
KEV
Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafte… |
|
CVE-2021-30532
MEDIUM 4.3
Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy v… |
|
CVE-2021-30531
MEDIUM 6.5
Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy v… |
|
CVE-2021-3426
MEDIUM 5.7
There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server co… |
|
CVE-2021-31323
MEDIUM 5.5
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashProperty fu… |
|
CVE-2021-31322
MEDIUM 5.5
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate function of thei… |
|
CVE-2021-31319
MEDIUM 5.5
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by an Integer Overflow in the LOTGradient::populate function of their c… |
|
CVE-2021-31318
MEDIUM 5.5
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the LOTCompLayerItem::LOTCompLayerItem function … |
|
CVE-2021-31317
MEDIUM 5.5
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the VDasher constructor of their custom fork of … |
|
CVE-2021-31315
MEDIUM 5.5
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the blit function of their custom fork of … |
|
CVE-2020-26146
MEDIUM 5.3
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numb… |
|
CVE-2020-26144
MEDIUM 6.5
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the fi… |
|
CVE-2020-26140
MEDIUM 6.5
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a prote… |
|
CVE-2021-31178
MEDIUM 5.5
Microsoft Office Information Disclosure Vulnerability |
|
CVE-2021-31174
MEDIUM 5.5
Microsoft Excel Information Disclosure Vulnerability |
|
CVE-2021-1906
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-21229
MEDIUM 6.5
Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML pa… |
|
CVE-2021-21228
MEDIUM 4.3
Insufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an attacker who convinced a user to install a malicious extension … |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.