Vulnerabilities
Tracked app vulnerabilities
19,673 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,673
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-21334
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
|
CVE-2025-21333
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
|
CVE-2025-21332
HIGH · vendor
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21331
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21330
HIGH · vendor
Windows Remote Desktop Services Denial of Service Vulnerability |
|
CVE-2025-21329
HIGH · vendor
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21328
HIGH · vendor
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21327
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21326
HIGH · vendor
Internet Explorer Remote Code Execution Vulnerability |
|
CVE-2025-21325
HIGH · vendor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2025-21324
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21323
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21321
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21320
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21319
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21318
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21317
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21316
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2025-21315
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-21314
HIGH · vendor
Windows SmartScreen Spoofing Vulnerability |
|
CVE-2025-21313
HIGH · vendor
Windows Security Account Manager (SAM) Denial of Service Vulnerability |
|
CVE-2025-21312
HIGH · vendor
Windows Smart Card Reader Information Disclosure Vulnerability |
|
CVE-2025-21311
CRITICAL · vendor
Windows NTLM V1 Elevation of Privilege Vulnerability |
|
CVE-2025-21310
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21309
CRITICAL · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-21308
HIGH · vendor
Windows Themes Spoofing Vulnerability |
|
CVE-2025-21307
CRITICAL · vendor
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
|
CVE-2025-21306
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21305
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21304
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2025-21303
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21302
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21301
HIGH · vendor
Windows Geolocation Service Information Disclosure Vulnerability |
|
CVE-2025-21300
HIGH · vendor
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability |
|
CVE-2025-21299
HIGH · vendor
Windows Kerberos Security Feature Bypass Vulnerability |
|
CVE-2025-21298
CRITICAL · vendor
Windows OLE Remote Code Execution Vulnerability |
|
CVE-2025-21297
CRITICAL · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-21296
CRITICAL · vendor
BranchCache Remote Code Execution Vulnerability |
|
CVE-2025-21295
CRITICAL · vendor
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
|
CVE-2025-21294
CRITICAL · vendor
Microsoft Digest Authentication Remote Code Execution Vulnerability |
|
CVE-2025-21293
HIGH · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2025-21292
HIGH · vendor
Windows Search Service Elevation of Privilege Vulnerability |
|
CVE-2025-21291
HIGH · vendor
Windows Direct Show Remote Code Execution Vulnerability |
|
CVE-2025-21290
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21289
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21288
HIGH · vendor
Windows COM Server Information Disclosure Vulnerability |
|
CVE-2025-21287
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21286
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21285
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21284
HIGH · vendor
Windows Virtual Trusted Platform Module Denial of Service Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.