Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-31175
HIGH 7.8
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2021-31208
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2021-31205
HIGH · vendor
Windows SMB Client Security Feature Bypass Vulnerability |
|
CVE-2021-31193
HIGH · vendor
Windows SSDP Service Elevation of Privilege Vulnerability |
|
CVE-2021-31192
HIGH · vendor
Windows Media Foundation Core Remote Code Execution Vulnerability |
|
CVE-2021-31191
HIGH · vendor
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability |
|
CVE-2021-31190
HIGH · vendor
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2021-31188
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2021-31187
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2021-31186
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
|
CVE-2021-31185
HIGH · vendor
Windows Desktop Bridge Denial of Service Vulnerability |
|
CVE-2021-31184
HIGH · vendor
Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability |
|
CVE-2021-31182
HIGH · vendor
Microsoft Bluetooth Driver Spoofing Vulnerability |
|
CVE-2021-31170
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2021-31169
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2021-31168
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2021-31167
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2021-31165
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2021-28479
HIGH · vendor
Windows CSC Service Information Disclosure Vulnerability |
|
CVE-2021-28455
HIGH · vendor
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability |
|
CVE-2020-24588
Windows Wireless Networking Spoofing Vulnerability |
|
CVE-2020-24587
Windows Wireless Networking Information Disclosure Vulnerability |
|
CVE-2021-21233
HIGH 8.8
Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted … |
|
CVE-2021-21232
HIGH 8.8
Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21231
HIGH 8.8
Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-21230
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21227
HIGH 8.8
Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-21225
HIGH 8.8
Out of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2021-21224
HIGH 8.8
KEV
Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
|
CVE-2021-21220
HIGH 8.8
KEV
Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a… |
|
CVE-2021-21214
HIGH 8.8
Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte… |
|
CVE-2021-21213
HIGH 8.8
Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21207
HIGH 8.6
Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially per… |
|
CVE-2021-21206
HIGH 8.8
KEV
Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21204
HIGH 8.8
Use after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21203
HIGH 8.8
Use after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21202
HIGH 8.6
Use after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially pe… |
|
CVE-2021-28453
HIGH 7.8
Microsoft Word Remote Code Execution Vulnerability |
|
CVE-2021-28452
HIGH 7.1
Microsoft Outlook Memory Corruption Vulnerability |
|
CVE-2021-28451
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-28449
HIGH 7.8
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2021-28447
HIGH · vendor
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability |
|
CVE-2021-28446
HIGH · vendor
Windows Portmapping Information Disclosure Vulnerability |
|
CVE-2021-28445
HIGH · vendor
Windows Network File System Remote Code Execution Vulnerability |
|
CVE-2021-28444
HIGH · vendor
Windows Hyper-V Security Feature Bypass Vulnerability |
|
CVE-2021-28443
HIGH · vendor
Windows Console Driver Denial of Service Vulnerability |
|
CVE-2021-28442
HIGH · vendor
Windows TCP/IP Information Disclosure Vulnerability |
|
CVE-2021-28441
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2021-28440
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2021-28439
HIGH · vendor
Windows TCP/IP Driver Denial of Service Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.