Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11
All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2022-41113
HIGH 7.8
Windows

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2022-41109
HIGH 7.8
Windows

Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-41107
HIGH 7.8
Microsoft Office Office

Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-41106
HIGH 8.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41102
HIGH 7.8
Windows

Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2022-41101
HIGH 7.8
Windows

Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2022-41100
HIGH 7.8
Windows

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-41096
HIGH 7.8
Windows

Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-41095
HIGH 7.8
Windows

Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2022-41093
HIGH 7.8
Windows

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-41092
HIGH 7.8
Windows

Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-41088
HIGH 8.1
Windows

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-41073
HIGH 7.8 KEV
Windows

Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41063
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41061
HIGH 7.8
Microsoft Office Microsoft Word Office

Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41058
HIGH 7.5
Windows

Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2022-41057
HIGH 7.8
Windows

Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2022-41056
HIGH 7.5
Windows

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
CVE-2022-41054
HIGH 7.8
Windows

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2022-41053
HIGH 7.5
Windows

Windows Kerberos Denial of Service Vulnerability
CVE-2022-41052
HIGH 7.8
Windows

Windows Graphics Component Remote Code Execution Vulnerability
CVE-2022-41050
HIGH 7.8
Windows

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
CVE-2022-41048
HIGH 8.8
Windows

Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-41047
HIGH 8.8
Windows

Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-41045
HIGH 7.8
Windows

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-41039
HIGH 8.1
Windows

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-38023
HIGH 8.1
Windows

Netlogon RPC Elevation of Privilege Vulnerability
CVE-2022-37992
HIGH 7.8
Windows

Windows Group Policy Elevation of Privilege Vulnerability
CVE-2022-37967
HIGH 7.2
Windows

Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-37966
HIGH 8.1
Windows

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
CVE-2022-3450
HIGH 8.8
Chrome Google Chrome

Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …
CVE-2022-3449
HIGH 8.8
Chrome Google Chrome

Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to install a malicious extension to potential…
CVE-2022-3448
HIGH 8.8
Chrome Google Chrome

Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in specific UI gestures to …
CVE-2022-3446
HIGH 8.8
Chrome Google Chrome

Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…
CVE-2022-3445
HIGH 8.8
Chrome Google Chrome

Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro…
CVE-2022-45061
HIGH 7.5
Python 3.12 Python 3.13 Python 3.14

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decod…
CVE-2022-3889
HIGH 8.8
Chrome Google Chrome

Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…
CVE-2022-3888
HIGH 8.8
Chrome Google Chrome

Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. …
CVE-2022-3887
HIGH 8.8
Chrome Google Chrome

Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…
CVE-2022-3886
HIGH 8.8
Chrome Google Chrome

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…
CVE-2022-3885
HIGH 8.8
Chrome Google Chrome

Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…
CVE-2022-23824
HIGH · vendor
Windows

AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions
CVE-2022-42919
HIGH · vendor
Python 3.12 Python 3.13 Python 3.14

Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing libra…
CVE-2022-3723
HIGH 8.8 KEV
Chrome Google Chrome

Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…
CVE-2022-3659
HIGH 8.8
Chrome Google Chrome

Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI in…
CVE-2022-3658
HIGH 8.8
Chrome Google Chrome

Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a user to install a mali…
CVE-2022-3657
HIGH 8.8
Chrome Google Chrome

Use after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially e…
CVE-2022-3656
HIGH 8.8
Chrome Google Chrome

Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via a crafted …
CVE-2022-3655
HIGH 8.8
Chrome Google Chrome

Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to po…
CVE-2022-3654
HIGH 8.8
Chrome Google Chrome

Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM