Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-38650
HIGH 7.6
Microsoft Office Spoofing Vulnerability |
|
CVE-2021-38646
HIGH 7.8
KEV
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
|
CVE-2021-38639
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-38638
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2021-38634
HIGH 7.1
Microsoft Windows Update Client Elevation of Privilege Vulnerability |
|
CVE-2021-38633
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2021-38630
HIGH 7.8
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-38628
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2021-36975
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-36974
HIGH 7.8
Windows SMB Elevation of Privilege Vulnerability |
|
CVE-2021-36973
HIGH 7.8
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability |
|
CVE-2021-36967
HIGH 8.0
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability |
|
CVE-2021-36966
HIGH 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2021-36965
HIGH 8.8
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability |
|
CVE-2021-36964
HIGH 7.8
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-36963
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2021-36960
HIGH 7.5
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-36955
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2021-36954
HIGH 8.8
Windows Bind Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2021-26435
HIGH 8.1
Windows Scripting Engine Memory Corruption Vulnerability |
|
CVE-2021-30624
HIGH 8.8
Chromium: CVE-2021-30624 Use after free in Autofill |
|
CVE-2021-30623
HIGH 8.8
Chromium: CVE-2021-30623 Use after free in Bookmarks |
|
CVE-2021-30622
HIGH 8.8
Chromium: CVE-2021-30622 Use after free in WebApp Installs |
|
CVE-2021-30620
HIGH 8.8
Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink |
|
CVE-2021-30618
HIGH 8.8
Chromium: CVE-2021-30618 Inappropriate implementation in DevTools |
|
CVE-2021-30616
HIGH 8.8
Chromium: CVE-2021-30616 Use after free in Media |
|
CVE-2021-30614
HIGH 8.8
Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip |
|
CVE-2021-30613
HIGH 8.8
Chromium: CVE-2021-30613 Use after free in Base internals |
|
CVE-2021-30612
HIGH 8.8
Chromium: CVE-2021-30612 Use after free in WebRTC |
|
CVE-2021-30611
HIGH 8.8
Chromium: CVE-2021-30611 Use after free in WebRTC |
|
CVE-2021-30610
HIGH 8.8
Chromium: CVE-2021-30610 Use after free in Extensions API |
|
CVE-2021-30609
HIGH 8.8
Chromium: CVE-2021-30609 Use after free in Sign-In |
|
CVE-2021-30608
HIGH 8.8
Chromium: CVE-2021-30608 Use after free in Web Share |
|
CVE-2021-30607
HIGH 8.8
Chromium: CVE-2021-30607 Use after free in Permissions |
|
CVE-2021-30606
HIGH 8.8
Chromium: CVE-2021-30606 Use after free in Blink |
|
CVE-2021-30604
HIGH 8.8
Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30603
HIGH 7.5
Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30602
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit h… |
|
CVE-2021-30601
HIGH 8.8
Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potential… |
|
CVE-2021-30600
HIGH 8.8
Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
|
CVE-2021-30599
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
|
CVE-2021-30598
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
|
CVE-2021-30593
HIGH 8.1
Out of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an… |
|
CVE-2021-30592
HIGH 8.8
Out of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform … |
|
CVE-2021-30591
HIGH 8.8
Use after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-30590
HIGH 8.8
Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-29989
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed evidence of memory corruption and we pres… |
|
CVE-2021-29988
HIGH 8.8
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploita… |
|
CVE-2021-29986
HIGH 8.1
A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note: This issue only affected Linux operati… |
|
CVE-2021-29985
HIGH 8.8
A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbir… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.