Vulnerabilities
Tracked app vulnerabilities
19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,673
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-59253
HIGH · vendor
Windows Search Service Denial of Service Vulnerability |
|
CVE-2025-59244
HIGH · vendor
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-59242
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-59230
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2025-59214
HIGH · vendor
Microsoft Windows File Explorer Spoofing Vulnerability |
|
CVE-2025-59211
HIGH · vendor
Windows Push Notification Information Disclosure Vulnerability |
|
CVE-2025-59209
HIGH · vendor
Windows Push Notification Information Disclosure Vulnerability |
|
CVE-2025-59208
HIGH · vendor
Windows MapUrlToZone Information Disclosure Vulnerability |
|
CVE-2025-59207
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59205
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-59204
HIGH · vendor
Windows Management Services Information Disclosure Vulnerability |
|
CVE-2025-59203
HIGH · vendor
Windows State Repository API Server File Information Disclosure Vulnerability |
|
CVE-2025-59202
HIGH · vendor
Windows Remote Desktop Services Elevation of Privilege Vulnerability |
|
CVE-2025-59201
HIGH · vendor
Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability |
|
CVE-2025-59200
HIGH · vendor
Data Sharing Service Spoofing Vulnerability |
|
CVE-2025-59199
HIGH · vendor
Software Protection Platform (SPP) Elevation of Privilege Vulnerability |
|
CVE-2025-59198
HIGH · vendor
Windows Search Service Denial of Service Vulnerability |
|
CVE-2025-59197
HIGH · vendor
Windows ETL Channel Information Disclosure Vulnerability |
|
CVE-2025-59196
HIGH · vendor
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
|
CVE-2025-59195
HIGH · vendor
Windows Graphics Component Denial of Service Vulnerability |
|
CVE-2025-59194
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59193
HIGH · vendor
Windows Management Services Elevation of Privilege Vulnerability |
|
CVE-2025-59192
HIGH · vendor
Storport.sys Driver Elevation of Privilege Vulnerability |
|
CVE-2025-59191
HIGH · vendor
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2025-59190
HIGH · vendor
Windows Search Service Denial of Service Vulnerability |
|
CVE-2025-59188
HIGH · vendor
Microsoft Failover Cluster Information Disclosure Vulnerability |
|
CVE-2025-59187
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-59186
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-59185
HIGH · vendor
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-59184
HIGH · vendor
Storage Spaces Direct Information Disclosure Vulnerability |
|
CVE-2025-58739
HIGH · vendor
Microsoft Windows File Explorer Spoofing Vulnerability |
|
CVE-2025-58738
HIGH · vendor
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58737
HIGH · vendor
Remote Desktop Protocol Remote Code Execution Vulnerability |
|
CVE-2025-58736
HIGH · vendor
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58735
HIGH · vendor
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58734
HIGH · vendor
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58733
HIGH · vendor
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58732
HIGH · vendor
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58731
HIGH · vendor
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58730
HIGH · vendor
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability |
|
CVE-2025-58729
HIGH · vendor
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2025-58728
HIGH · vendor
Windows Bluetooth Service Elevation of Privilege Vulnerability |
|
CVE-2025-58727
HIGH · vendor
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2025-58726
HIGH · vendor
Windows SMB Server Elevation of Privilege Vulnerability |
|
CVE-2025-58725
HIGH · vendor
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
|
CVE-2025-58722
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-58720
HIGH · vendor
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2025-58719
HIGH · vendor
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2025-58718
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-58717
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.