Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-38006
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-38005
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-38004
HIGH · vendor
Windows Fax Service Remote Code Execution Vulnerability |
|
CVE-2022-37957
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37956
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37955
HIGH · vendor
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2022-37954
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-35841
HIGH · vendor
Windows Enterprise App Management Service Remote Code Execution Vulnerability |
|
CVE-2022-35840
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35838
HIGH · vendor
HTTP V3 Denial of Service Vulnerability |
|
CVE-2022-35837
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-35836
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35835
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35834
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35833
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-35832
HIGH · vendor
Windows Event Tracing Denial of Service Vulnerability |
|
CVE-2022-35831
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2022-35830
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2022-35803
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2022-34734
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34733
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-34732
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34731
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-34730
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34729
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2022-34728
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-34727
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34726
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34725
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-34724
HIGH · vendor
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2022-34723
HIGH · vendor
Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability |
|
CVE-2022-34720
HIGH · vendor
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
|
CVE-2022-34719
HIGH · vendor
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
|
CVE-2022-33679
HIGH · vendor
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2022-33647
HIGH · vendor
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2022-30200
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-30196
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-30170
HIGH · vendor
Windows Credential Roaming Service Elevation of Privilege Vulnerability |
|
CVE-2022-26928
HIGH · vendor
Windows Photo Import API Elevation of Privilege Vulnerability |
|
CVE-2020-10735
HIGH 7.5
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an i… |
|
CVE-2021-28861
HIGH 7.4
Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path whic… |
|
CVE-2022-2624
HIGH 8.8
Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to p… |
|
CVE-2022-2623
HIGH 8.8
Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interact… |
|
CVE-2022-2621
HIGH 8.8
Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
|
CVE-2022-2620
HIGH 8.8
Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interact… |
|
CVE-2022-2617
HIGH 8.8
Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potential… |
|
CVE-2022-2614
HIGH 8.8
Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2613
HIGH 8.8
Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interacti… |
|
CVE-2022-2609
HIGH 8.8
Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user i… |
|
CVE-2022-2608
HIGH 8.8
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user … |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.