Vulnerabilities
Tracked app vulnerabilities
28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,052
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-58718
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2025-58717
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-58716
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2025-58715
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2025-58714
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-55701
HIGH · vendor
Windows Authentication Elevation of Privilege Vulnerability |
|
CVE-2025-55700
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
|
CVE-2025-55699
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-55696
HIGH · vendor
NtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability |
|
CVE-2025-55695
HIGH · vendor
Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
|
CVE-2025-55692
HIGH · vendor
Windows Error Reporting Service Elevation of Privilege Vulnerability |
|
CVE-2025-55687
HIGH · vendor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
|
CVE-2025-55685
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-55683
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-55681
HIGH · vendor
Desktop Window Manager Elevation of Privilege Vulnerability |
|
CVE-2025-55680
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2025-55679
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2025-55678
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-55340
HIGH · vendor
Windows Remote Desktop Protocol Security Feature Bypass |
|
CVE-2025-55339
HIGH · vendor
Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability |
|
CVE-2025-55338
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55336
HIGH · vendor
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
|
CVE-2025-55335
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2025-55333
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55332
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55331
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-55330
HIGH · vendor
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2025-55328
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2025-55326
HIGH · vendor
Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability |
|
CVE-2025-55325
HIGH · vendor
Windows Storage Management Provider Information Disclosure Vulnerability |
|
CVE-2025-53768
HIGH · vendor
Xbox IStorageService Elevation of Privilege Vulnerability |
|
CVE-2025-53150
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-53139
HIGH · vendor
Windows Hello Security Feature Bypass Vulnerability |
|
CVE-2025-50175
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-50152
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2025-49708
CRITICAL · vendor
Microsoft Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2025-48813
HIGH · vendor
Virtual Secure Mode Spoofing Vulnerability |
|
CVE-2025-48004
HIGH · vendor
Microsoft Brokering File System Elevation of Privilege Vulnerability |
|
CVE-2025-47827
MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11 |
|
CVE-2025-25004
HIGH · vendor
PowerShell Elevation of Privilege Vulnerability |
|
CVE-2025-24990
Windows Agere Modem Driver Elevation of Privilege Vulnerability |
|
CVE-2025-24052
HIGH · vendor
Windows Agere Modem Driver Elevation of Privilege Vulnerability |
|
CVE-2025-31718
HIGH 7.5
In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of privilege with no additional execution pri… |
|
CVE-2025-31717
HIGH 7.5
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privilege… |
|
CVE-2025-43296
MEDIUM 5.5
A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeeper checks. |
|
CVE-2025-47354
HIGH 7.8
Memory corruption while allocating buffers in DSP service. |
|
CVE-2025-47351
HIGH 7.8
Memory corruption while processing user buffers. |
|
CVE-2025-27054
HIGH 7.8
Memory corruption while processing a malformed license file during reboot. |
|
CVE-2025-27053
HIGH 7.8
Memory corruption during PlayReady APP usecase while processing TA commands. |
|
CVE-2025-39946
CRITICAL 9.8
In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket t… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.