Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-27072
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-26417
HIGH · vendor
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2021-26416
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-26415
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2021-26413
HIGH · vendor
Windows Installer Spoofing Vulnerability |
|
CVE-2021-21199
HIGH 8.8
Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially explo… |
|
CVE-2021-21198
HIGH 7.4
Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
|
CVE-2021-21197
HIGH 8.8
Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2021-21196
HIGH 8.8
Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a craf… |
|
CVE-2021-21195
HIGH 8.8
Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21194
HIGH 8.8
Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2021-23987
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory c… |
|
CVE-2021-23981
HIGH 8.1
A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a… |
|
CVE-2021-21193
HIGH 8.8
KEV
Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21192
HIGH 8.8
Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-21191
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-27077
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-27070
HIGH 7.3
Windows 10 Update Assistant Elevation of Privilege Vulnerability |
|
CVE-2021-27063
HIGH 7.5
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2021-27059
HIGH 7.6
KEV
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2021-27057
HIGH 7.8
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2021-27056
HIGH 7.8
Microsoft PowerPoint Remote Code Execution Vulnerability |
|
CVE-2021-27055
HIGH 7.0
Microsoft Visio Security Feature Bypass Vulnerability |
|
CVE-2021-27054
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-27053
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-26901
HIGH 7.8
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-26900
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-26899
HIGH 7.8
Windows UPnP Device Host Elevation of Privilege Vulnerability |
|
CVE-2021-26898
HIGH 7.8
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-26896
HIGH 7.5
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2021-26891
HIGH 7.8
Windows Container Execution Agent Elevation of Privilege Vulnerability |
|
CVE-2021-26890
HIGH 7.8
Application Virtualization Remote Code Execution Vulnerability |
|
CVE-2021-26889
HIGH 7.8
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2021-26887
HIGH 7.8
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file ser… |
|
CVE-2021-26885
HIGH 7.8
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2021-26882
HIGH 7.8
Remote Access API Elevation of Privilege Vulnerability |
|
CVE-2021-26881
HIGH 7.5
Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
|
CVE-2021-26880
HIGH 7.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
|
CVE-2021-26879
HIGH 7.5
Windows Network Address Translation (NAT) Denial of Service Vulnerability |
|
CVE-2021-26878
HIGH 7.8
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2021-26876
HIGH 8.8
OpenType Font Parsing Remote Code Execution Vulnerability |
|
CVE-2021-26875
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-26874
HIGH 7.8
Windows Overlay Filter Elevation of Privilege Vulnerability |
|
CVE-2021-26873
HIGH 7.0
Windows User Profile Service Elevation of Privilege Vulnerability |
|
CVE-2021-26872
HIGH 7.8
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-26871
HIGH 7.8
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2021-26870
HIGH 7.8
Windows Projected File System Elevation of Privilege Vulnerability |
|
CVE-2021-26868
HIGH 7.8
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2021-26866
HIGH 7.1
Windows Update Service Elevation of Privilege Vulnerability |
|
CVE-2021-26865
HIGH 8.8
Windows Container Execution Agent Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.