Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-33772
HIGH 7.5
Windows TCP/IP Driver Denial of Service Vulnerability |
|
CVE-2021-33771
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2021-33761
HIGH 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2021-33759
HIGH 7.8
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2021-33758
HIGH 7.7
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-33756
HIGH 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability |
|
CVE-2021-33754
HIGH 8.0
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2021-33752
HIGH 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability |
|
CVE-2021-33751
HIGH 7.0
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2021-33750
HIGH 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability |
|
CVE-2021-33749
HIGH 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability |
|
CVE-2021-33746
HIGH 8.0
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2021-33743
HIGH 7.8
Windows Projected File System Elevation of Privilege Vulnerability |
|
CVE-2021-33740
HIGH 7.8
Windows Media Remote Code Execution Vulnerability |
|
CVE-2021-31979
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2021-31183
HIGH 7.5
Windows TCP/IP Driver Denial of Service Vulnerability |
|
CVE-2021-34527
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfull… |
|
CVE-2021-30557
HIGH 8.8
Use after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potentially ex… |
|
CVE-2021-30556
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30555
HIGH 8.8
Use after free in Sharing in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potentially expl… |
|
CVE-2021-30554
HIGH 8.8
KEV
Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-17759
HIGH 8.8
An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers for arbitrary command execution if the us… |
|
CVE-2021-29967
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we pres… |
|
CVE-2021-29964
HIGH 7.1
A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to an out-of-bounds read. *This bug only … |
|
CVE-2021-29950
HIGH 7.5
Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure, the secret key may… |
|
CVE-2021-29949
HIGH 7.8
When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distri… |
|
CVE-2021-29946
HIGH 8.8
Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc hea… |
|
CVE-2021-24002
HIGH 8.8
When a user clicked on an FTP URL containing encoded newline characters (%0A and %0D), the newlines would have been interpreted as such and allowed arbitrary c… |
|
CVE-2021-23999
HIGH 8.8
If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should… |
|
CVE-2021-23995
HIGH 8.8
When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been expl… |
|
CVE-2021-23994
HIGH 8.8
A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vulnerability affects Firefox ESR < 78.10,… |
|
CVE-2021-30553
HIGH 8.8
Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-30552
HIGH 8.8
Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
|
CVE-2021-30551
HIGH 8.8
KEV
Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30550
HIGH 8.8
Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentiall… |
|
CVE-2021-30549
HIGH 8.8
Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially … |
|
CVE-2021-30548
HIGH 8.8
Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30547
HIGH 8.8
Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted… |
|
CVE-2021-30546
HIGH 8.8
Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30545
HIGH 8.8
Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to potentially exploit … |
|
CVE-2021-30544
HIGH 8.8
Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-31949
HIGH 7.3
Microsoft Outlook Remote Code Execution Vulnerability |
|
CVE-2021-31941
HIGH 7.8
Microsoft Office Graphics Remote Code Execution Vulnerability |
|
CVE-2021-31939
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-1675
Windows Print Spooler Remote Code Execution Vulnerability |
|
CVE-2021-33739
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2021-31977
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-31976
HIGH · vendor
Server for NFS Information Disclosure Vulnerability |
|
CVE-2021-31975
HIGH · vendor
Server for NFS Information Disclosure Vulnerability |
|
CVE-2021-31974
HIGH · vendor
Server for NFS Denial of Service Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.