Vulnerabilities
Tracked app vulnerabilities
19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,673
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-8880
Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium sec… |
|
CVE-2025-8879
Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit heap corruption via a curated set of g… |
|
CVE-2025-53766
CRITICAL · vendor
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
|
CVE-2025-53761
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
|
CVE-2025-53741
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-53739
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-53738
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2025-53737
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-53736
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
|
CVE-2025-53735
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
|
CVE-2025-53733
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
|
CVE-2025-55231
HIGH · vendor
Windows Storage-based Management Service Remote Code Execution Vulnerability |
|
CVE-2025-55230
HIGH · vendor
Windows MBT Transport Driver Elevation of Privilege Vulnerability |
|
CVE-2025-55229
HIGH · vendor
Windows Certificate Spoofing Vulnerability |
|
CVE-2025-53789
HIGH · vendor
Windows StateRepository API Server file Elevation of Privilege Vulnerability |
|
CVE-2025-53779
MEDIUM · vendor
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2025-53778
CRITICAL · vendor
Windows NTLM Elevation of Privilege Vulnerability |
|
CVE-2025-53726
HIGH · vendor
Windows Push Notifications Apps Elevation of Privilege Vulnerability |
|
CVE-2025-53725
HIGH · vendor
Windows Push Notifications Apps Elevation of Privilege Vulnerability |
|
CVE-2025-53724
HIGH · vendor
Windows Push Notifications Apps Elevation of Privilege Vulnerability |
|
CVE-2025-53723
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-53722
HIGH · vendor
Windows Remote Desktop Services Denial of Service Vulnerability |
|
CVE-2025-53721
HIGH · vendor
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2025-53720
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-53719
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53718
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53716
HIGH · vendor
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
|
CVE-2025-53156
HIGH · vendor
Windows Storage Port Driver Information Disclosure Vulnerability |
|
CVE-2025-53155
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-53154
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53153
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53152
HIGH · vendor
Desktop Windows Manager Remote Code Execution Vulnerability |
|
CVE-2025-53151
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-53149
HIGH · vendor
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-53148
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53147
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53145
HIGH · vendor
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2025-53144
HIGH · vendor
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2025-53143
HIGH · vendor
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
|
CVE-2025-53142
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-53141
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53140
HIGH · vendor
Windows Kernel Transaction Manager Elevation of Privilege Vulnerability |
|
CVE-2025-53138
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-53137
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53136
HIGH · vendor
NT OS Kernel Information Disclosure Vulnerability |
|
CVE-2025-53135
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-53134
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-53133
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-53132
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2025-53131
HIGH · vendor
Windows Media Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.