Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-0603
Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a craf… |
|
CVE-2018-25032
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. |
|
CVE-2022-26488
In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker t… |
|
CVE-2022-24525
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2022-24508
HIGH · vendor
Win32 File Enumeration Remote Code Execution Vulnerability |
|
CVE-2022-24507
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2022-24505
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-24503
HIGH · vendor
Remote Desktop Protocol Client Information Disclosure Vulnerability |
|
CVE-2022-24502
HIGH · vendor
Windows HTML Platforms Security Feature Bypass Vulnerability |
|
CVE-2022-24460
HIGH · vendor
Tablet Windows User Interface Application Elevation of Privilege Vulnerability |
|
CVE-2022-24459
HIGH · vendor
Windows Fax and Scan Service Elevation of Privilege Vulnerability |
|
CVE-2022-24455
HIGH · vendor
Windows CD-ROM Driver Elevation of Privilege Vulnerability |
|
CVE-2022-24454
HIGH · vendor
Windows Security Support Provider Interface Elevation of Privilege Vulnerability |
|
CVE-2022-23299
HIGH · vendor
Windows PDEV Elevation of Privilege Vulnerability |
|
CVE-2022-23298
HIGH · vendor
Windows NT OS Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-23297
HIGH · vendor
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability |
|
CVE-2022-23296
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2022-23294
HIGH · vendor
Windows Event Tracing Remote Code Execution Vulnerability |
|
CVE-2022-23293
HIGH · vendor
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability |
|
CVE-2022-23291
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2022-23290
HIGH · vendor
Windows Inking COM Elevation of Privilege Vulnerability |
|
CVE-2022-23288
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2022-23287
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-23286
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2022-23285
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2022-23284
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-23283
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-23281
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2022-23253
HIGH · vendor
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
|
CVE-2022-22010
HIGH · vendor
Media Foundation Information Disclosure Vulnerability |
|
CVE-2022-21990
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2022-21977
HIGH · vendor
Media Foundation Information Disclosure Vulnerability |
|
CVE-2022-21975
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2022-21967
HIGH · vendor
Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability |
|
CVE-2021-3737
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to… |
|
CVE-2022-0311
Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interacti… |
|
CVE-2022-0310
Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via specific user … |
|
CVE-2022-0308
Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user i… |
|
CVE-2022-0307
Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interacti… |
|
CVE-2022-0306
Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0304
Use after free in Bookmarks in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to po… |
|
CVE-2022-0302
Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentiall… |
|
CVE-2022-0301
Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentiall… |
|
CVE-2022-0300
Use after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specif… |
|
CVE-2022-0298
Use after free in Scheduling in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0297
Use after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0296
Use after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to p… |
|
CVE-2022-0295
Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to po… |
|
CVE-2022-0293
Use after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0289
Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.