Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-21304
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-21303
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21302
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21301
HIGH · vendor
Windows Geolocation Service Information Disclosure Vulnerability |
|
CVE-2025-21300
HIGH · vendor
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability |
|
CVE-2025-21299
HIGH · vendor
Windows Kerberos Security Feature Bypass Vulnerability |
|
CVE-2025-21293
HIGH · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2025-21292
HIGH · vendor
Windows Search Service Elevation of Privilege Vulnerability |
|
CVE-2025-21291
HIGH · vendor
Windows Direct Show Remote Code Execution Vulnerability |
|
CVE-2025-21290
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21289
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21288
HIGH · vendor
Windows COM Server Information Disclosure Vulnerability |
|
CVE-2025-21287
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21286
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21285
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21284
HIGH · vendor
Windows Virtual Trusted Platform Module Denial of Service Vulnerability |
|
CVE-2025-21282
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21281
HIGH · vendor
Microsoft COM for Windows Elevation of Privilege Vulnerability |
|
CVE-2025-21280
HIGH · vendor
Windows Virtual Trusted Platform Module Denial of Service Vulnerability |
|
CVE-2025-21278
HIGH · vendor
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2025-21277
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21276
HIGH · vendor
Windows MapUrlToZone Denial of Service Vulnerability |
|
CVE-2025-21275
HIGH · vendor
Windows App Package Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21274
HIGH · vendor
Windows Event Tracing Denial of Service Vulnerability |
|
CVE-2025-21273
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21272
HIGH · vendor
Windows COM Server Information Disclosure Vulnerability |
|
CVE-2025-21271
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2025-21270
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21269
HIGH · vendor
Windows HTML Platforms Security Feature Bypass Vulnerability |
|
CVE-2025-21268
HIGH · vendor
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21266
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21265
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21263
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21261
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21260
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21258
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21257
HIGH · vendor
Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
|
CVE-2025-21256
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21255
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21252
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21251
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21250
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21249
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21248
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21246
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21245
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21244
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21243
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21242
HIGH · vendor
Windows Kerberos Information Disclosure Vulnerability |
|
CVE-2025-21241
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.