Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-29103
HIGH · vendor
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2022-29102
HIGH · vendor
Windows Failover Cluster Information Disclosure Vulnerability |
|
CVE-2022-26940
HIGH · vendor
Remote Desktop Protocol Client Information Disclosure Vulnerability |
|
CVE-2022-26939
HIGH · vendor
Storage Spaces Direct Elevation of Privilege Vulnerability |
|
CVE-2022-26938
HIGH · vendor
Storage Spaces Direct Elevation of Privilege Vulnerability |
|
CVE-2022-26936
HIGH · vendor
Windows Server Service Information Disclosure Vulnerability |
|
CVE-2022-26935
HIGH · vendor
Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
|
CVE-2022-26934
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-26933
HIGH · vendor
Windows NTFS Information Disclosure Vulnerability |
|
CVE-2022-26932
HIGH · vendor
Storage Spaces Direct Elevation of Privilege Vulnerability |
|
CVE-2022-26930
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2022-26927
HIGH · vendor
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2022-26925
Windows LSA Spoofing Vulnerability |
|
CVE-2022-26913
HIGH · vendor
Windows Authentication Information Disclosure Vulnerability |
|
CVE-2022-24466
HIGH · vendor
Windows Hyper-V Security Feature Bypass Vulnerability |
|
CVE-2022-23279
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-22713
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2022-22019
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2022-22016
HIGH · vendor
Windows PlayToManager Elevation of Privilege Vulnerability |
|
CVE-2022-22015
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
|
CVE-2022-22014
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-22013
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-22012
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-22011
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-29072
HIGH 7.8
7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area. This … |
|
CVE-2022-26903
HIGH 7.8
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2022-26901
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2022-26826
HIGH 7.2
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26795
HIGH 7.8
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-24545
HIGH 8.1
Windows Kerberos Remote Code Execution Vulnerability |
|
CVE-2022-24486
HIGH 7.8
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2015-20107
HIGH 7.6
In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow att… |
|
CVE-2022-26920
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-26918
HIGH · vendor
Windows Fax Compose Form Remote Code Execution Vulnerability |
|
CVE-2022-26917
HIGH · vendor
Windows Fax Compose Form Remote Code Execution Vulnerability |
|
CVE-2022-26916
HIGH · vendor
Windows Fax Compose Form Remote Code Execution Vulnerability |
|
CVE-2022-26915
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-26914
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-26904
Windows User Profile Service Elevation of Privilege Vulnerability |
|
CVE-2022-26831
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2022-26830
HIGH · vendor
DiskUsage.exe Remote Code Execution Vulnerability |
|
CVE-2022-26829
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26828
HIGH · vendor
Windows Bluetooth Driver Elevation of Privilege Vulnerability |
|
CVE-2022-26827
HIGH · vendor
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2022-26825
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26824
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26823
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26822
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26821
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26820
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.