Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-53155
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-53154
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53153
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53152
HIGH · vendor
Desktop Windows Manager Remote Code Execution Vulnerability |
|
CVE-2025-53151
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-53149
HIGH · vendor
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-53148
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53147
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53145
HIGH · vendor
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2025-53144
HIGH · vendor
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2025-53143
HIGH · vendor
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2025-53142
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-53141
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53140
HIGH · vendor
Windows Kernel Transaction Manager Elevation of Privilege Vulnerability |
|
CVE-2025-53138
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53137
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53136
HIGH · vendor
NT OS Kernel Information Disclosure Vulnerability |
|
CVE-2025-53135
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-53134
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53133
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-53132
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-53131
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-50173
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-50172
HIGH · vendor
DirectX Graphics Kernel Denial of Service Vulnerability |
|
CVE-2025-50171
HIGH · vendor
Remote Desktop Spoofing Vulnerability |
|
CVE-2025-50170
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2025-50169
HIGH · vendor
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2025-50168
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-50167
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-50166
HIGH · vendor
Windows Distributed Transaction Coordinator (MSDTC) Information Disclosure Vulnerability |
|
CVE-2025-50164
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-50163
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-50162
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-50161
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-50160
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-50159
HIGH · vendor
Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability |
|
CVE-2025-50158
HIGH · vendor
Windows NTFS Information Disclosure Vulnerability |
|
CVE-2025-50157
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-50156
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-50155
HIGH · vendor
Windows Push Notifications Apps Elevation of Privilege Vulnerability |
|
CVE-2025-50154
HIGH · vendor
Microsoft Windows File Explorer Spoofing Vulnerability |
|
CVE-2025-50153
HIGH · vendor
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2025-49762
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-49761
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-49757
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49751
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2025-49743
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-8088
A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This… |
|
CVE-2025-8578
Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
|
CVE-2025-8576
Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.