Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-0995
HIGH 8.8
Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2025-21394
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21391
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2025-21390
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21387
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21386
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21383
HIGH 7.8
Microsoft Excel Information Disclosure Vulnerability |
|
CVE-2025-21381
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21420
HIGH · vendor
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability |
|
CVE-2025-21419
HIGH · vendor
Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
|
CVE-2025-21418
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-21414
HIGH · vendor
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2025-21410
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-21407
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21406
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21377
HIGH · vendor
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-21375
HIGH · vendor
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-21373
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21371
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21369
HIGH · vendor
Microsoft Digest Authentication Remote Code Execution Vulnerability |
|
CVE-2025-21368
HIGH · vendor
Microsoft Digest Authentication Remote Code Execution Vulnerability |
|
CVE-2025-21367
HIGH · vendor
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2025-21359
HIGH · vendor
Windows Kernel Security Feature Bypass Vulnerability |
|
CVE-2025-21358
HIGH · vendor
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2025-21352
HIGH · vendor
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21351
HIGH · vendor
Windows Active Directory Domain Services API Denial of Service Vulnerability |
|
CVE-2025-21350
HIGH · vendor
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2025-21349
HIGH · vendor
Windows Remote Desktop Configuration Service Tampering Vulnerability |
|
CVE-2025-21347
HIGH · vendor
Windows Deployment Services Denial of Service Vulnerability |
|
CVE-2025-21337
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-21254
HIGH · vendor
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21216
HIGH · vendor
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21212
HIGH · vendor
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21208
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-21201
HIGH · vendor
Windows Telephony Server Remote Code Execution Vulnerability |
|
CVE-2025-21200
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21190
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21184
HIGH · vendor
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2025-21183
HIGH · vendor
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
|
CVE-2025-21182
HIGH · vendor
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
|
CVE-2025-21181
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21179
HIGH · vendor
DHCP Client Service Denial of Service Vulnerability |
|
CVE-2025-1014
HIGH 8.8
Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. This vulnerability was fixed in Fir… |
|
CVE-2025-1012
HIGH 7.5
A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7,… |
|
CVE-2025-1011
HIGH 8.8
A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vul… |
|
CVE-2025-1010
HIGH 8.8
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefo… |
|
CVE-2025-0762
HIGH 8.8
Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exten… |
|
CVE-2025-0411
7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installat… |
|
CVE-2025-0612
HIGH 7.5
Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2025-0611
HIGH 8.2
Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.