Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-41356
HIGH 7.5
Windows Denial of Service Vulnerability |
|
CVE-2021-40442
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-38666
HIGH 8.8
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2021-38665
HIGH 7.4
Remote Desktop Protocol Client Information Disclosure Vulnerability |
|
CVE-2021-36957
HIGH 7.8
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2021-38501
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presu… |
|
CVE-2021-38500
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presu… |
|
CVE-2021-38498
HIGH 7.5
During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitabl… |
|
CVE-2021-38496
HIGH 8.8
During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable cras… |
|
CVE-2021-38495
HIGH 8.8
Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of memory corruption and we presume that with… |
|
CVE-2021-38493
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we pres… |
|
CVE-2021-29991
HIGH 8.1
Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a header splitting attack against servers… |
|
CVE-2018-6122
HIGH 8.8
Type confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-37993
HIGH 8.8
Use after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2021-37992
HIGH 8.8
Out of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-37991
HIGH 7.5
Race in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-37988
HIGH 8.8
Use after free in Profiles in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who convinced a user to engage in specific gestures to potentially … |
|
CVE-2021-37987
HIGH 8.8
Use after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-37986
HIGH 8.8
Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to engage with Dev Tools to potentially exploit heap corrupti… |
|
CVE-2021-37985
HIGH 8.8
Use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow for connection to debugger to potential… |
|
CVE-2021-37984
HIGH 8.8
Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-37983
HIGH 8.8
Use after free in Dev Tools in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-37982
HIGH 8.8
Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-37980
HIGH 7.4
Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows. |
|
CVE-2021-37979
HIGH 8.8
heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potent… |
|
CVE-2021-37978
HIGH 8.8
Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-37977
HIGH 8.8
Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
|
CVE-2021-40486
HIGH 7.8
Microsoft Word Remote Code Execution Vulnerability |
|
CVE-2021-40485
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-40474
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-41361
HIGH · vendor
Active Directory Federation Server Spoofing Vulnerability |
|
CVE-2021-41357
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-41347
HIGH · vendor
Windows AppX Deployment Service Elevation of Privilege Vulnerability |
|
CVE-2021-41346
HIGH · vendor
Console Window Host Security Feature Bypass Vulnerability |
|
CVE-2021-41345
HIGH · vendor
Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2021-41343
HIGH · vendor
Windows Fast FAT File System Driver Information Disclosure Vulnerability |
|
CVE-2021-41342
HIGH · vendor
Windows MSHTML Platform Remote Code Execution Vulnerability |
|
CVE-2021-41340
HIGH · vendor
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2021-41339
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2021-41338
HIGH · vendor
Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability |
|
CVE-2021-41337
HIGH · vendor
Active Directory Security Feature Bypass Vulnerability |
|
CVE-2021-41336
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2021-41335
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2021-41334
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2021-41332
HIGH · vendor
Windows Print Spooler Information Disclosure Vulnerability |
|
CVE-2021-41331
HIGH · vendor
Windows Media Audio Decoder Remote Code Execution Vulnerability |
|
CVE-2021-41330
HIGH · vendor
Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
|
CVE-2021-40489
HIGH · vendor
Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2021-40488
HIGH · vendor
Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2021-40478
HIGH · vendor
Storage Spaces Controller Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.