Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-43248
HIGH · vendor
Windows Digital Media Receiver Elevation of Privilege Vulnerability |
|
CVE-2021-43247
HIGH · vendor
Windows TCP/IP Driver Elevation of Privilege Vulnerability |
|
CVE-2021-43246
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-43244
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2021-43240
HIGH · vendor
NTFS Set Short Name Elevation of Privilege Vulnerability |
|
CVE-2021-43239
HIGH · vendor
Windows Recovery Environment Agent Elevation of Privilege Vulnerability |
|
CVE-2021-43238
HIGH · vendor
Windows Remote Access Elevation of Privilege Vulnerability |
|
CVE-2021-43237
HIGH · vendor
Windows Setup Elevation of Privilege Vulnerability |
|
CVE-2021-43236
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2021-43235
HIGH · vendor
Storage Spaces Controller Information Disclosure Vulnerability |
|
CVE-2021-43234
HIGH · vendor
Windows Fax Service Remote Code Execution Vulnerability |
|
CVE-2021-43232
HIGH · vendor
Windows Event Tracing Remote Code Execution Vulnerability |
|
CVE-2021-43231
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-43230
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-43229
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-43228
HIGH · vendor
SymCrypt Denial of Service Vulnerability |
|
CVE-2021-43227
HIGH · vendor
Storage Spaces Controller Information Disclosure Vulnerability |
|
CVE-2021-43224
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2021-43223
HIGH · vendor
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2021-43222
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2021-43219
HIGH · vendor
DirectX Graphics Kernel File Denial of Service Vulnerability |
|
CVE-2021-43216
HIGH · vendor
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability |
|
CVE-2021-43207
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2021-41333
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2021-43539
HIGH 8.8
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers… |
|
CVE-2021-43537
HIGH 8.8
An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulne… |
|
CVE-2021-43535
HIGH 8.8
A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially exploitable… |
|
CVE-2021-43534
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some of these bugs showed evidence of memory c… |
|
CVE-2021-38510
HIGH 8.8
The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's computer.*Note: Thi… |
|
CVE-2021-38504
HIGH 8.8
When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory corruption a… |
|
CVE-2021-38003
HIGH 8.8
KEV
Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-38001
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-37998
HIGH 8.8
Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
|
CVE-2021-37997
HIGH 8.8
Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially exploit heap… |
|
CVE-2021-42296
HIGH 7.8
Microsoft Word Remote Code Execution Vulnerability |
|
CVE-2021-42292
HIGH 7.8
KEV
Microsoft Excel Security Feature Bypass Vulnerability |
|
CVE-2021-42291
HIGH 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2021-42287
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2021-42286
HIGH 7.8
Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability |
|
CVE-2021-42285
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2021-42283
HIGH 8.8
NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-42282
HIGH 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2021-42278
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2021-42276
HIGH 7.8
Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
|
CVE-2021-42275
HIGH 8.8
Microsoft COM for Windows Remote Code Execution Vulnerability |
|
CVE-2021-41378
HIGH 7.8
Windows NTFS Remote Code Execution Vulnerability |
|
CVE-2021-41377
HIGH 7.8
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability |
|
CVE-2021-41370
HIGH 7.8
NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-41367
HIGH 7.8
NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-41366
HIGH 7.8
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.