Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-58717
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-58716
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2025-58715
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2025-58714
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-55701
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-55700
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-55699
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-55696
HIGH · vendor
NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability |
|
CVE-2025-55695
HIGH · vendor
Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
|
CVE-2025-55692
HIGH · vendor
Windows Error Reporting Service Elevation of Privilege Vulnerability |
|
CVE-2025-55687
HIGH · vendor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2025-55685
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-55683
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-55681
HIGH · vendor
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2025-55680
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2025-55679
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-55678
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-55340
HIGH · vendor
Windows Remote Desktop Protocol Security Feature Bypass |
|
CVE-2025-55339
HIGH · vendor
Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability |
|
CVE-2025-55338
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55336
HIGH · vendor
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
|
CVE-2025-55335
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-55333
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55332
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55331
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-55330
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55328
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-55326
HIGH · vendor
Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability |
|
CVE-2025-55325
HIGH · vendor
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-53768
HIGH · vendor
Xbox IStorageService Elevation of Privilege Vulnerability |
|
CVE-2025-53150
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-53139
HIGH · vendor
Windows Hello Security Feature Bypass Vulnerability |
|
CVE-2025-50175
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-50152
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-48813
HIGH · vendor
Virtual Secure Mode Spoofing Vulnerability |
|
CVE-2025-48004
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-47827
MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11 |
|
CVE-2025-25004
HIGH · vendor
PowerShell Elevation of Privilege Vulnerability |
|
CVE-2025-24990
Windows Agere Modem Driver Elevation of Privilege Vulnerability |
|
CVE-2025-24052
HIGH · vendor
Windows Agere Modem Driver Elevation of Privilege Vulnerability |
|
CVE-2025-10892
HIGH 8.8
Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2025-10891
HIGH 8.8
Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2025-10502
HIGH 8.8
Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network t… |
|
CVE-2025-10501
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2025-10500
HIGH 8.8
Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2025-59216
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to el… |
|
CVE-2025-59215
HIGH 7.0
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-10537
HIGH 8.8
Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruptio… |
|
CVE-2025-10534
HIGH 8.1
Spoofing issue in the Site Permissions component. This vulnerability was fixed in Firefox 143 and Thunderbird 143. |
|
CVE-2025-10533
HIGH 8.8
Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.