Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,673
Actively exploited
303
Publication window
1997-01-01 → 2026-10-20
All CVEs 19,673 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,673 entries Windows Clear all
CVE
CVE-2025-0999
HIGH 8.8
Chrome Google Chrome

Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (…
CVE-2025-1414
MEDIUM 6.5
Mozilla Firefox

Memory safety bugs present in Firefox 135. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h…
CVE-2025-0997
HIGH 8.1
Chrome Google Chrome

Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte…
CVE-2025-0996
MEDIUM 5.4
Chrome Google Chrome

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (U…
CVE-2025-0995
HIGH 8.8
Chrome Google Chrome

Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…
CVE-2025-21394
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21391
HIGH 7.1 KEV
Windows

Windows Storage Elevation of Privilege Vulnerability
CVE-2025-21390
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21387
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21386
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21383
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Information Disclosure Vulnerability
CVE-2025-21381
HIGH 7.8
Microsoft Excel Microsoft Office Office

Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21420
HIGH · vendor
Windows

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
CVE-2025-21419
HIGH · vendor
Windows

Windows Setup Files Cleanup Elevation of Privilege Vulnerability
CVE-2025-21418
HIGH · vendor KEV
Windows

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-21414
HIGH · vendor
Windows

Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-21410
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2025-21407
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21406
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21379
CRITICAL · vendor
Windows

DHCP Client Service Remote Code Execution Vulnerability
CVE-2025-21377
HIGH · vendor
Windows

NTLM Hash Disclosure Spoofing Vulnerability
CVE-2025-21376
CRITICAL · vendor
Windows

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2025-21375
HIGH · vendor
Windows

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2025-21373
HIGH · vendor
Windows

Windows Installer Elevation of Privilege Vulnerability
CVE-2025-21371
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21369
HIGH · vendor
Windows

Microsoft Digest Authentication Remote Code Execution Vulnerability
CVE-2025-21368
HIGH · vendor
Windows

Microsoft Digest Authentication Remote Code Execution Vulnerability
CVE-2025-21367
HIGH · vendor
Windows

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2025-21359
HIGH · vendor
Windows

Windows Kernel Security Feature Bypass Vulnerability
CVE-2025-21358
HIGH · vendor
Windows

Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-21352
HIGH · vendor
Windows

Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21351
HIGH · vendor
Windows

Windows Active Directory Domain Services API Denial of Service Vulnerability
CVE-2025-21350
HIGH · vendor
Windows

Windows Kerberos Denial of Service Vulnerability
CVE-2025-21349
HIGH · vendor
Windows

Windows Remote Desktop Configuration Service Tampering Vulnerability
CVE-2025-21347
HIGH · vendor
Windows

Windows Deployment Services Denial of Service Vulnerability
CVE-2025-21337
HIGH · vendor
Windows

Windows NTFS Elevation of Privilege Vulnerability
CVE-2025-21254
HIGH · vendor
Windows

Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21216
HIGH · vendor
Windows

Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21212
HIGH · vendor
Windows

Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2025-21208
HIGH · vendor
Windows

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2025-21201
HIGH · vendor
Windows

Windows Telephony Server Remote Code Execution Vulnerability
CVE-2025-21200
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21190
HIGH · vendor
Windows

Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21184
HIGH · vendor
Windows

Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-21183
HIGH · vendor
Windows

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-21182
HIGH · vendor
Windows

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVE-2025-21181
HIGH · vendor
Windows

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2025-21179
HIGH · vendor
Windows

DHCP Client Service Denial of Service Vulnerability
CVE-2025-0451
MEDIUM 6.3
Chrome Google Chrome

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI …
CVE-2025-0445
MEDIUM 5.4
Chrome Google Chrome

Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM