Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-28438
HIGH · vendor
Windows Console Driver Denial of Service Vulnerability |
|
CVE-2021-28437
HIGH · vendor
Windows Installer Information Disclosure Vulnerability |
|
CVE-2021-28436
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2021-28435
HIGH · vendor
Windows Event Tracing Information Disclosure Vulnerability |
|
CVE-2021-28434
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28358
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28357
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28356
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28355
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28354
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28353
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28352
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28351
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2021-28350
HIGH · vendor
Windows GDI+ Remote Code Execution Vulnerability |
|
CVE-2021-28349
HIGH · vendor
Windows GDI+ Remote Code Execution Vulnerability |
|
CVE-2021-28348
HIGH · vendor
Windows GDI+ Remote Code Execution Vulnerability |
|
CVE-2021-28347
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2021-28346
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28345
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28344
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28342
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28341
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28340
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28328
HIGH · vendor
Windows DNS Information Disclosure Vulnerability |
|
CVE-2021-28327
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28326
HIGH · vendor
Windows AppX Deployment Server Denial of Service Vulnerability |
|
CVE-2021-28325
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-28324
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-28323
HIGH · vendor
Windows DNS Information Disclosure Vulnerability |
|
CVE-2021-28322
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28321
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28320
HIGH · vendor
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
|
CVE-2021-28319
HIGH · vendor
Windows TCP/IP Driver Denial of Service Vulnerability |
|
CVE-2021-28318
HIGH · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2021-28317
HIGH · vendor
Microsoft Windows Codecs Library Information Disclosure Vulnerability |
|
CVE-2021-28316
HIGH · vendor
Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability |
|
CVE-2021-28314
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2021-28313
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28311
HIGH · vendor
Windows Application Compatibility Cache Denial of Service Vulnerability |
|
CVE-2021-28310
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-28309
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2021-27096
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-27094
HIGH · vendor
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability |
|
CVE-2021-27093
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2021-27092
HIGH · vendor
Azure AD Web Sign-in Security Feature Bypass Vulnerability |
|
CVE-2021-27090
HIGH · vendor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2021-27089
HIGH · vendor
Microsoft Internet Messaging API Remote Code Execution Vulnerability |
|
CVE-2021-27088
HIGH · vendor
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-27086
HIGH · vendor
Windows Services and Controller App Elevation of Privilege Vulnerability |
|
CVE-2021-27079
HIGH · vendor
Windows Media Photo Codec Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.