Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-37988
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37987
HIGH · vendor
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
|
CVE-2022-37986
HIGH · vendor
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-37985
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-37984
HIGH · vendor
Windows WLAN Service Elevation of Privilege Vulnerability |
|
CVE-2022-37983
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2022-37982
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-37981
HIGH · vendor
Windows Event Logging Service Denial of Service Vulnerability |
|
CVE-2022-37980
HIGH · vendor
Windows DHCP Client Elevation of Privilege Vulnerability |
|
CVE-2022-37978
HIGH · vendor
Windows Active Directory Certificate Services Security Feature Bypass |
|
CVE-2022-37977
HIGH · vendor
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
|
CVE-2022-37975
HIGH · vendor
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2022-37974
HIGH · vendor
Windows Mixed Reality Developer Tools Information Disclosure Vulnerability |
|
CVE-2022-37973
HIGH · vendor
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2022-37970
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2022-37965
HIGH · vendor
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
|
CVE-2022-35770
HIGH · vendor
Windows NTLM Spoofing Vulnerability |
|
CVE-2022-33645
HIGH · vendor
Windows TCP/IP Driver Denial of Service Vulnerability |
|
CVE-2022-33635
HIGH · vendor
Windows GDI+ Remote Code Execution Vulnerability |
|
CVE-2019-5797
HIGH 7.5
Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-3200
HIGH 8.8
Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2022-3199
HIGH 8.8
Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
|
CVE-2022-3198
HIGH 8.8
Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromi… |
|
CVE-2022-3197
HIGH 8.8
Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromi… |
|
CVE-2022-3196
HIGH 8.8
Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromi… |
|
CVE-2022-3195
HIGH 8.8
Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML p… |
|
CVE-2022-3071
HIGH 8.8
Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific U… |
|
CVE-2022-3058
HIGH 8.8
Use after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to … |
|
CVE-2022-3055
HIGH 8.8
Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to pot… |
|
CVE-2022-3052
HIGH 8.8
Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in… |
|
CVE-2022-3051
HIGH 8.8
Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in spec… |
|
CVE-2022-3050
HIGH 8.8
Heap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI inte… |
|
CVE-2022-3049
HIGH 8.8
Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific… |
|
CVE-2022-3046
HIGH 8.8
Use after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to potentially … |
|
CVE-2022-3045
HIGH 8.8
Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a… |
|
CVE-2022-3043
HIGH 8.8
Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specifi… |
|
CVE-2022-3042
HIGH 8.8
Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted … |
|
CVE-2022-3041
HIGH 8.8
Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-3040
HIGH 8.8
Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-3039
HIGH 8.8
Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-3038
HIGH 8.8
KEV
Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2022-2998
HIGH 8.8
Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI inter… |
|
CVE-2022-2859
HIGH 8.8
Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions… |
|
CVE-2022-2858
HIGH 8.8
Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI intera… |
|
CVE-2022-2857
HIGH 8.8
Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2855
HIGH 8.8
Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2854
HIGH 8.8
Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2853
HIGH 8.8
Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to pot… |
|
CVE-2022-2852
HIGH 8.8
Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.