Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-47999
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2025-47998
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-47996
HIGH · vendor
Windows MBT Transport Driver Elevation of Privilege Vulnerability |
|
CVE-2025-47993
HIGH · vendor
Microsoft PC Manager Elevation of Privilege Vulnerability |
|
CVE-2025-47991
HIGH · vendor
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability |
|
CVE-2025-47987
HIGH · vendor
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability |
|
CVE-2025-47986
HIGH · vendor
Universal Print Management Service Elevation of Privilege Vulnerability |
|
CVE-2025-47985
HIGH · vendor
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2025-47984
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2025-47982
HIGH · vendor
Windows Storage VSP Driver Elevation of Privilege Vulnerability |
|
CVE-2025-47978
HIGH · vendor
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2025-47976
HIGH · vendor
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
|
CVE-2025-47975
HIGH · vendor
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
|
CVE-2025-47973
HIGH · vendor
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2025-47972
HIGH · vendor
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability |
|
CVE-2025-47971
HIGH · vendor
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2025-47159
HIGH · vendor
Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability |
|
CVE-2025-33054
HIGH · vendor
Remote Desktop Spoofing Vulnerability |
|
CVE-2025-26636
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-6554
HIGH 8.1
KEV
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium secur… |
|
CVE-2025-6436
HIGH 8.1
Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s… |
|
CVE-2025-6435
HIGH 8.1
If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file … |
|
CVE-2025-6432
HIGH 8.6
When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not respondin… |
|
CVE-2025-6426
HIGH 8.8
The executable file warning did not warn users before opening files with the `terminal` extension. *This bug only affects Firefox for macOS. Other versions of… |
|
CVE-2025-6218
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install… |
|
CVE-2025-6192
HIGH 8.8
Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
|
CVE-2025-6191
HIGH 8.8
Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML… |
|
CVE-2025-5959
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
|
CVE-2025-5958
HIGH 8.8
Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
|
CVE-2025-47175
HIGH 7.8
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
|
CVE-2025-47169
HIGH 7.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2025-47168
HIGH 7.8
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2025-47165
HIGH 7.8
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-47969
HIGH · vendor
Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability |
|
CVE-2025-47955
HIGH · vendor
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2025-47160
HIGH · vendor
Windows Shortcut Files Security Feature Bypass Vulnerability |
|
CVE-2025-33075
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-33073
Windows SMB Client Elevation of Privilege Vulnerability |
|
CVE-2025-33069
HIGH · vendor
Windows App Control for Business Security Feature Bypass Vulnerability |
|
CVE-2025-33068
HIGH · vendor
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-33067
HIGH · vendor
Windows Task Scheduler Elevation of Privilege Vulnerability |
|
CVE-2025-33066
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-33065
HIGH · vendor
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33064
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-33063
HIGH · vendor
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33062
HIGH · vendor
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33061
HIGH · vendor
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33060
HIGH · vendor
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33059
HIGH · vendor
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-33058
HIGH · vendor
Windows Storage Management Provider Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.