Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 12,531
Actively exploited: 246
Publication window: 2004-07-27 → 2026-11-11

All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2022-21958 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21928 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21924 HIGH · vendor Windows 2022-01-11 Workstation Service Remote Protocol Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21922 HIGH · vendor Windows 2022-01-11 Remote Procedure Call Runtime Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21921 HIGH · vendor Windows 2022-01-11 Windows Defender Credential Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21920 HIGH · vendor Windows 2022-01-11 Windows Kerberos Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21919 HIGH · vendor KEV Windows 2022-01-11 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2022-01-11
CVE-2022-21918 HIGH · vendor Windows 2022-01-11 DirectX Graphics Kernel File Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21916 HIGH · vendor Windows 2022-01-11 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21915 HIGH · vendor Windows 2022-01-11 Windows GDI+ Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21914 HIGH · vendor Windows 2022-01-11 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21913 HIGH · vendor Windows 2022-01-11 Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21910 HIGH · vendor Windows 2022-01-11 Microsoft Cluster Port Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21908 HIGH · vendor Windows 2022-01-11 Windows Installer Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21906 HIGH · vendor Windows 2022-01-11 Windows Defender Application Control Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21905 HIGH · vendor Windows 2022-01-11 Windows Hyper-V Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21904 HIGH · vendor Windows 2022-01-11 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21903 HIGH · vendor Windows 2022-01-11 Windows GDI Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21902 HIGH · vendor Windows 2022-01-11 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21901 HIGH · vendor Windows 2022-01-11 Windows Hyper-V Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21900 HIGH · vendor Windows 2022-01-11 Windows Hyper-V Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21897 HIGH · vendor Windows 2022-01-11 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21896 HIGH · vendor Windows 2022-01-11 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21895 HIGH · vendor Windows 2022-01-11 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21894 HIGH · vendor Windows 2022-01-11 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21893 HIGH · vendor Windows 2022-01-11 Remote Desktop Protocol Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21892 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21890 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21889 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21888 HIGH · vendor Windows 2022-01-11 Windows Modern Execution Server Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21887 HIGH · vendor Windows 2022-01-11 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21885 HIGH · vendor Windows 2022-01-11 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21884 HIGH · vendor Windows 2022-01-11 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21883 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21881 HIGH · vendor Windows 2022-01-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21880 HIGH · vendor Windows 2022-01-11 Windows GDI+ Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21879 HIGH · vendor Windows 2022-01-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21878 HIGH · vendor Windows 2022-01-11 Windows Geolocation Service Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21877 HIGH · vendor Windows 2022-01-11 Storage Spaces Controller Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21876 HIGH · vendor Windows 2022-01-11 Win32k Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21875 HIGH · vendor Windows 2022-01-11 Windows Storage Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21874 HIGH · vendor Windows 2022-01-11 Windows Security Center API Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21873 HIGH · vendor Windows 2022-01-11 Tile Data Repository Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21872 HIGH · vendor Windows 2022-01-11 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21871 HIGH · vendor Windows 2022-01-11 Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21870 HIGH · vendor Windows 2022-01-11 Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21869 HIGH · vendor Windows 2022-01-11 Clipboard User Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21868 HIGH · vendor Windows 2022-01-11 Windows Devices Human Interface Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21867 HIGH · vendor Windows 2022-01-11 Windows Push Notifications Apps Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21866 HIGH · vendor Windows 2022-01-11 Windows System Launcher Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM