Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-21865
HIGH · vendor
Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2022-21864
HIGH · vendor
Windows UI Immersive Server API Elevation of Privilege Vulnerability |
|
CVE-2022-21863
HIGH · vendor
Windows StateRepository API Server file Elevation of Privilege Vulnerability |
|
CVE-2022-21862
HIGH · vendor
Windows Application Model Core API Elevation of Privilege Vulnerability |
|
CVE-2022-21861
HIGH · vendor
Task Flow Data Engine Elevation of Privilege Vulnerability |
|
CVE-2022-21860
HIGH · vendor
Windows AppContracts API Server Elevation of Privilege Vulnerability |
|
CVE-2022-21859
HIGH · vendor
Windows Accounts Control Elevation of Privilege Vulnerability |
|
CVE-2022-21858
HIGH · vendor
Windows Bind Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2022-21852
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2022-21851
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2022-21850
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2022-21849
HIGH · vendor
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
|
CVE-2022-21848
HIGH · vendor
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
|
CVE-2022-21847
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2022-21843
HIGH · vendor
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
|
CVE-2022-21839
HIGH · vendor
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability |
|
CVE-2022-21838
HIGH · vendor
Windows Cleanup Manager Elevation of Privilege Vulnerability |
|
CVE-2022-21836
HIGH · vendor
Windows Certificate Spoofing Vulnerability |
|
CVE-2022-21835
HIGH · vendor
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
|
CVE-2022-21834
HIGH · vendor
Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability |
|
CVE-2021-4079
HIGH 8.8
Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packet… |
|
CVE-2021-4078
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-4067
HIGH 8.8
Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf… |
|
CVE-2021-4066
HIGH 8.8
Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-4065
HIGH 8.8
Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-4064
HIGH 8.8
Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf… |
|
CVE-2021-4063
HIGH 8.8
Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2021-4062
HIGH 8.8
Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploi… |
|
CVE-2021-4061
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-4058
HIGH 8.8
Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-4057
HIGH 8.8
Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit hea… |
|
CVE-2021-4056
HIGH 8.8
Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-4055
HIGH 8.8
Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentia… |
|
CVE-2021-4053
HIGH 8.8
Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-4052
HIGH 8.8
Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially expl… |
|
CVE-2021-38017
HIGH 8.8
Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a craf… |
|
CVE-2021-38016
HIGH 8.8
Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted… |
|
CVE-2021-38015
HIGH 8.8
Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypas… |
|
CVE-2021-38014
HIGH 8.8
Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-38012
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-38011
HIGH 8.8
Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
|
CVE-2021-38008
HIGH 8.8
Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-38007
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-38006
HIGH 8.8
Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
|
CVE-2021-38005
HIGH 8.8
Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-43256
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-43226
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2021-43893
HIGH · vendor
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability |
|
CVE-2021-43883
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2021-43880
HIGH · vendor
Windows Mobile Device Management Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.