Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-0447
HIGH 8.8
Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a crafted HTML… |
|
CVE-2025-0443
HIGH 8.8
Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gest… |
|
CVE-2025-0438
HIGH 8.8
Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML p… |
|
CVE-2025-0437
HIGH 8.8
Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.… |
|
CVE-2025-0436
HIGH 8.8
Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
|
CVE-2025-0434
HIGH 8.8
Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2025-21362
HIGH 8.4
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21338
HIGH · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2025-21335
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
|
CVE-2025-21417
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21413
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21411
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21409
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21389
HIGH · vendor
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability |
|
CVE-2025-21382
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-21378
HIGH · vendor
Windows CSC Service Elevation of Privilege Vulnerability |
|
CVE-2025-21374
HIGH · vendor
Windows CSC Service Information Disclosure Vulnerability |
|
CVE-2025-21372
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-21370
HIGH · vendor
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
|
CVE-2025-21343
HIGH · vendor
Windows Web Threat Defense User Service Information Disclosure Vulnerability |
|
CVE-2025-21341
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21340
HIGH · vendor
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability |
|
CVE-2025-21339
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21336
HIGH · vendor
Windows Cryptographic Information Disclosure Vulnerability |
|
CVE-2025-21334
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
|
CVE-2025-21333
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
|
CVE-2025-21332
HIGH · vendor
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21331
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21330
HIGH · vendor
Windows Remote Desktop Services Denial of Service Vulnerability |
|
CVE-2025-21329
HIGH · vendor
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21328
HIGH · vendor
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21327
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21326
HIGH · vendor
Internet Explorer Remote Code Execution Vulnerability |
|
CVE-2025-21325
HIGH · vendor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2025-21324
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21323
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21321
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21320
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21319
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21318
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21317
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21316
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21315
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-21314
HIGH · vendor
Windows SmartScreen Spoofing Vulnerability |
|
CVE-2025-21313
HIGH · vendor
Windows Security Account Manager (SAM) Denial of Service Vulnerability |
|
CVE-2025-21312
HIGH · vendor
Windows Smart Card Reader Information Disclosure Vulnerability |
|
CVE-2025-21310
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21308
HIGH · vendor
Windows Themes Spoofing Vulnerability |
|
CVE-2025-21306
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21305
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.