Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-21118
Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a cr… |
|
CVE-2021-21117
Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a cr… |
|
CVE-2020-16044
Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet. |
|
CVE-2021-25195
HIGH · vendor
Windows PKU2U Elevation of Privilege Vulnerability |
|
CVE-2021-24106
HIGH · vendor
Windows DirectX Information Disclosure Vulnerability |
|
CVE-2021-24103
HIGH · vendor
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-24102
HIGH · vendor
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-24098
HIGH · vendor
Windows Console Driver Denial of Service Vulnerability |
|
CVE-2021-24096
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2021-24086
HIGH · vendor
Windows TCP/IP Denial of Service Vulnerability |
|
CVE-2021-24084
HIGH · vendor
Windows Mobile Device Management Information Disclosure Vulnerability |
|
CVE-2021-24083
HIGH · vendor
Windows Address Book Remote Code Execution Vulnerability |
|
CVE-2021-24082
HIGH · vendor
Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability |
|
CVE-2021-24079
HIGH · vendor
Windows Backup Engine Information Disclosure Vulnerability |
|
CVE-2021-24076
HIGH · vendor
Microsoft Windows VMSwitch Information Disclosure Vulnerability |
|
CVE-2021-24075
HIGH · vendor
Microsoft Windows VMSwitch Denial of Service Vulnerability |
|
CVE-2021-1734
HIGH · vendor
Windows Remote Procedure Call Information Disclosure Vulnerability |
|
CVE-2021-1731
HIGH · vendor
PFX Encryption Security Feature Bypass Vulnerability |
|
CVE-2021-1727
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2021-1698
HIGH · vendor
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-17162
HIGH · vendor
Microsoft Windows Security Feature Bypass Vulnerability |
|
CVE-2020-6572
Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
|
CVE-2021-1716
Microsoft Word Remote Code Execution Vulnerability |
|
CVE-2021-1715
Microsoft Word Remote Code Execution Vulnerability |
|
CVE-2021-1714
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-1713
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-1710
HIGH · vendor
Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
|
CVE-2021-1709
HIGH · vendor
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-1708
HIGH · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2021-1706
HIGH · vendor
Windows LUAFV Elevation of Privilege Vulnerability |
|
CVE-2021-1704
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2021-1703
HIGH · vendor
Windows Event Logging Service Elevation of Privilege Vulnerability |
|
CVE-2021-1702
HIGH · vendor
Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability |
|
CVE-2021-1701
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-1700
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-1699
HIGH · vendor
Windows (modem.sys) Information Disclosure Vulnerability |
|
CVE-2021-1697
HIGH · vendor
Windows InstallService Elevation of Privilege Vulnerability |
|
CVE-2021-1696
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2021-1695
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2021-1694
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2021-1693
HIGH · vendor
Windows CSC Service Elevation of Privilege Vulnerability |
|
CVE-2021-1692
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-1691
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-1690
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2021-1689
HIGH · vendor
Windows Multipoint Management Elevation of Privilege Vulnerability |
|
CVE-2021-1688
HIGH · vendor
Windows CSC Service Elevation of Privilege Vulnerability |
|
CVE-2021-1687
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2021-1686
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2021-1685
HIGH · vendor
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability |
|
CVE-2021-1684
HIGH · vendor
Windows Bluetooth Security Feature Bypass Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.