Vulnerabilities
Tracked app vulnerabilities
19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,673
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-49688
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49687
HIGH · vendor
Windows Input Method Editor (IME) Elevation of Privilege Vulnerability |
|
CVE-2025-49686
HIGH · vendor
Windows TCP/IP Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49685
HIGH · vendor
Windows Search Service Elevation of Privilege Vulnerability |
|
CVE-2025-49684
HIGH · vendor
Windows Storage Port Driver Information Disclosure Vulnerability |
|
CVE-2025-49683
HIGH · vendor
Microsoft Virtual Hard Disk Remote Code Execution Vulnerability |
|
CVE-2025-49682
HIGH · vendor
Windows Media Elevation of Privilege Vulnerability |
|
CVE-2025-49681
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-49680
HIGH · vendor
Windows Performance Recorder (WPR) Denial of Service Vulnerability |
|
CVE-2025-49679
HIGH · vendor
Windows Shell Elevation of Privilege Vulnerability |
|
CVE-2025-49678
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-49677
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-49676
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49675
HIGH · vendor
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49674
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49673
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49672
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49671
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-49670
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49669
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49668
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49667
HIGH · vendor
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2025-49666
HIGH · vendor
Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability |
|
CVE-2025-49665
HIGH · vendor
Workspace Broker Elevation of Privilege Vulnerability |
|
CVE-2025-49664
HIGH · vendor
Windows User-Mode Driver Framework Host Information Disclosure Vulnerability |
|
CVE-2025-49663
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-49661
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-49660
HIGH · vendor
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2025-49659
HIGH · vendor
Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability |
|
CVE-2025-49658
HIGH · vendor
Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure Vulnerability |
|
CVE-2025-49657
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-48824
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-48823
HIGH · vendor
Windows Cryptographic Services Information Disclosure Vulnerability |
|
CVE-2025-48822
CRITICAL · vendor
Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability |
|
CVE-2025-48821
HIGH · vendor
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability |
|
CVE-2025-48820
HIGH · vendor
Windows AppX Deployment Service Elevation of Privilege Vulnerability |
|
CVE-2025-48819
HIGH · vendor
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability |
|
CVE-2025-48818
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-48817
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-48816
HIGH · vendor
HID Class Driver Elevation of Privilege Vulnerability |
|
CVE-2025-48815
HIGH · vendor
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability |
|
CVE-2025-48814
HIGH · vendor
Remote Desktop Licensing Service Security Feature Bypass Vulnerability |
|
CVE-2025-48811
HIGH · vendor
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
|
CVE-2025-48810
HIGH · vendor
Windows Secure Kernel Mode Information Disclosure Vulnerability |
|
CVE-2025-48809
HIGH · vendor
Windows Secure Kernel Mode Information Disclosure Vulnerability |
|
CVE-2025-48808
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-48806
HIGH · vendor
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability |
|
CVE-2025-48805
HIGH · vendor
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability |
|
CVE-2025-48804
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-48803
HIGH · vendor
Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.