Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-3653
HIGH 8.8
Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
|
CVE-2022-3652
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2022-3315
HIGH 8.8
Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2022-3308
HIGH 7.4
Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape vi… |
|
CVE-2022-3307
HIGH 8.8
Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
|
CVE-2022-3306
HIGH 8.8
Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
|
CVE-2022-3305
HIGH 8.8
Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
|
CVE-2022-3304
HIGH 8.8
Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
|
CVE-2022-3373
HIGH 8.8
Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (… |
|
CVE-2022-3370
HIGH 8.8
Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2022-39260
HIGH 8.5
Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull fun… |
|
CVE-2022-39253
HIGH · vendor
Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are … |
|
CVE-2022-41033
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
|
CVE-2022-38051
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2022-38050
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-38046
HIGH · vendor
Web Account Manager Information Disclosure Vulnerability |
|
CVE-2022-38045
HIGH · vendor
Windows Server Service Elevation of Privilege Vulnerability |
|
CVE-2022-38044
HIGH · vendor
Windows CD-ROM File System Driver Remote Code Execution Vulnerability |
|
CVE-2022-38043
HIGH · vendor
Windows Security Support Provider Interface Information Disclosure Vulnerability |
|
CVE-2022-38042
HIGH · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2022-38041
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-38040
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-38039
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38038
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38037
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38036
HIGH · vendor
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
|
CVE-2022-38034
HIGH · vendor
Windows Workstation Service Elevation of Privilege Vulnerability |
|
CVE-2022-38033
HIGH · vendor
Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability |
|
CVE-2022-38032
HIGH · vendor
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability |
|
CVE-2022-38031
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-38030
HIGH · vendor
Windows USB Serial Driver Information Disclosure Vulnerability |
|
CVE-2022-38029
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-38028
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-38027
HIGH · vendor
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2022-38026
HIGH · vendor
Windows DHCP Client Information Disclosure Vulnerability |
|
CVE-2022-38025
HIGH · vendor
Windows Distributed File System (DFS) Information Disclosure Vulnerability |
|
CVE-2022-38022
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38021
HIGH · vendor
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
|
CVE-2022-38016
HIGH · vendor
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
|
CVE-2022-38003
HIGH · vendor
Windows Resilient File System Elevation of Privilege |
|
CVE-2022-37999
HIGH · vendor
Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
|
CVE-2022-37998
HIGH · vendor
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2022-37997
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2022-37996
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2022-37995
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37994
HIGH · vendor
Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
|
CVE-2022-37993
HIGH · vendor
Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
|
CVE-2022-37991
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37990
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37989
HIGH · vendor
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.