Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-29812
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-29811
HIGH · vendor
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
|
CVE-2025-29810
HIGH · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2025-29809
HIGH · vendor
Windows Kerberos Security Feature Bypass Vulnerability |
|
CVE-2025-29808
HIGH · vendor
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2025-27742
HIGH · vendor
NTFS Information Disclosure Vulnerability |
|
CVE-2025-27741
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-27740
HIGH · vendor
Active Directory Certificate Services Elevation of Privilege Vulnerability |
|
CVE-2025-27739
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-27738
HIGH · vendor
Windows Resilient File System (ReFS) Information Disclosure Vulnerability |
|
CVE-2025-27737
HIGH · vendor
Windows Security Zone Mapping Security Feature Bypass Vulnerability |
|
CVE-2025-27736
HIGH · vendor
Windows Power Dependency Coordinator Information Disclosure Vulnerability |
|
CVE-2025-27735
HIGH · vendor
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability |
|
CVE-2025-27733
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-27732
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-27731
HIGH · vendor
Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability |
|
CVE-2025-27730
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-27729
HIGH · vendor
Windows Shell Remote Code Execution Vulnerability |
|
CVE-2025-27728
HIGH · vendor
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
|
CVE-2025-27727
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-27492
HIGH · vendor
Windows Secure Channel Elevation of Privilege Vulnerability |
|
CVE-2025-27490
HIGH · vendor
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-27487
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-27486
HIGH · vendor
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-27485
HIGH · vendor
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-27484
HIGH · vendor
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability |
|
CVE-2025-27483
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-27481
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-27479
HIGH · vendor
Kerberos Key Distribution Proxy Service Denial of Service Vulnerability |
|
CVE-2025-27478
HIGH · vendor
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
|
CVE-2025-27477
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-27476
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-27475
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2025-27474
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-27473
HIGH · vendor
HTTP.sys Denial of Service Vulnerability |
|
CVE-2025-27471
HIGH · vendor
Microsoft Streaming Service Denial of Service Vulnerability |
|
CVE-2025-27470
HIGH · vendor
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-27469
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2025-26688
HIGH · vendor
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability |
|
CVE-2025-26681
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-26680
HIGH · vendor
Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
|
CVE-2025-26679
HIGH · vendor
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability |
|
CVE-2025-26678
HIGH · vendor
Windows Defender Application Control Security Feature Bypass Vulnerability |
|
CVE-2025-26676
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-26675
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2025-26674
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2025-26673
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2025-26672
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-26671
HIGH · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-26669
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.