Vulnerabilities
Tracked app vulnerabilities
19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,673
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-58716
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2025-58715
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2025-58714
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-55701
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-55700
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-55699
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-55696
HIGH · vendor
NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability |
|
CVE-2025-55695
HIGH · vendor
Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
|
CVE-2025-55692
HIGH · vendor
Windows Error Reporting Service Elevation of Privilege Vulnerability |
|
CVE-2025-55687
HIGH · vendor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2025-55685
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-55683
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-55681
HIGH · vendor
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2025-55680
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2025-55679
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-55678
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-55340
HIGH · vendor
Windows Remote Desktop Protocol Security Feature Bypass |
|
CVE-2025-55339
HIGH · vendor
Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability |
|
CVE-2025-55338
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55336
HIGH · vendor
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
|
CVE-2025-55335
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-55333
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55332
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55331
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-55330
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55328
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-55326
HIGH · vendor
Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability |
|
CVE-2025-55325
HIGH · vendor
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-53768
HIGH · vendor
Xbox IStorageService Elevation of Privilege Vulnerability |
|
CVE-2025-53150
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-53139
HIGH · vendor
Windows Hello Security Feature Bypass Vulnerability |
|
CVE-2025-50175
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-50152
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-49708
CRITICAL · vendor
Microsoft Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-48813
HIGH · vendor
Virtual Secure Mode Spoofing Vulnerability |
|
CVE-2025-48004
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-47827
MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11 |
|
CVE-2025-25004
HIGH · vendor
PowerShell Elevation of Privilege Vulnerability |
|
CVE-2025-24990
Windows Agere Modem Driver Elevation of Privilege Vulnerability |
|
CVE-2025-24052
HIGH · vendor
Windows Agere Modem Driver Elevation of Privilege Vulnerability |
|
CVE-2025-10892
Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2025-10891
Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2025-10890
Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C… |
|
CVE-2025-10585
Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2025-10502
Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network t… |
|
CVE-2025-10501
Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2025-10500
Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2025-59216
HIGH 7.0
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to el… |
|
CVE-2025-59215
HIGH 7.0
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
|
CVE-2025-10537
Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruptio… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.