Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2022-0603
HIGH 8.8

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a craf…

CVE-2018-25032
HIGH 7.5

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

CVE-2022-26488
HIGH 7.0

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker t…

CVE-2022-24525
HIGH · vendor

Windows Update Stack Elevation of Privilege Vulnerability

CVE-2022-24508
HIGH · vendor

Win32 File Enumeration Remote Code Execution Vulnerability

CVE-2022-24507
HIGH · vendor

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2022-24505
HIGH · vendor

Windows ALPC Elevation of Privilege Vulnerability

CVE-2022-24503
HIGH · vendor

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVE-2022-24502
HIGH · vendor

Windows HTML Platforms Security Feature Bypass Vulnerability

CVE-2022-24460
HIGH · vendor

Tablet Windows User Interface Application Elevation of Privilege Vulnerability

CVE-2022-24459
HIGH · vendor

Windows Fax and Scan Service Elevation of Privilege Vulnerability

CVE-2022-24455
HIGH · vendor

Windows CD-ROM Driver Elevation of Privilege Vulnerability

CVE-2022-24454
HIGH · vendor

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

CVE-2022-23299
HIGH · vendor

Windows PDEV Elevation of Privilege Vulnerability

CVE-2022-23298
HIGH · vendor

Windows NT OS Kernel Elevation of Privilege Vulnerability

CVE-2022-23297
HIGH · vendor

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

CVE-2022-23296
HIGH · vendor

Windows Installer Elevation of Privilege Vulnerability

CVE-2022-23294
HIGH · vendor

Windows Event Tracing Remote Code Execution Vulnerability

CVE-2022-23293
HIGH · vendor

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

CVE-2022-23291
HIGH · vendor

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2022-23290
HIGH · vendor

Windows Inking COM Elevation of Privilege Vulnerability

CVE-2022-23288
HIGH · vendor

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2022-23287
HIGH · vendor

Windows ALPC Elevation of Privilege Vulnerability

CVE-2022-23286
HIGH · vendor

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2022-23285
HIGH · vendor

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2022-23284
HIGH · vendor

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-23283
HIGH · vendor

Windows ALPC Elevation of Privilege Vulnerability

CVE-2022-23281
HIGH · vendor

Windows Common Log File System Driver Information Disclosure Vulnerability

CVE-2022-23253
HIGH · vendor

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

CVE-2022-22010
HIGH · vendor

Media Foundation Information Disclosure Vulnerability

CVE-2022-21990
HIGH · vendor

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2022-21977
HIGH · vendor

Media Foundation Information Disclosure Vulnerability

CVE-2022-21975
HIGH · vendor

Windows Hyper-V Denial of Service Vulnerability

CVE-2022-21967
HIGH · vendor

Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability

CVE-2021-3737
HIGH 7.5

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to…

CVE-2022-0311
HIGH 8.8

Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interacti…

CVE-2022-0310
HIGH 8.8

Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via specific user …

CVE-2022-0308
HIGH 8.8

Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user i…

CVE-2022-0307
HIGH 8.8

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interacti…

CVE-2022-0306
HIGH 8.8

Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-0304
HIGH 8.8

Use after free in Bookmarks in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to po…

CVE-2022-0302
HIGH 8.8

Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentiall…

CVE-2022-0301
HIGH 7.8

Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentiall…

CVE-2022-0300
HIGH 8.8

Use after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specif…

CVE-2022-0298
HIGH 8.8

Use after free in Scheduling in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-0297
HIGH 8.8

Use after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-0296
HIGH 8.8

Use after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to p…

CVE-2022-0295
HIGH 8.8

Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to po…

CVE-2022-0293
HIGH 8.8

Use after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-0289
HIGH 8.8

Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM