Vulnerabilities
Tracked app vulnerabilities
28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,052
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2024-49838
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49836
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49740
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-43093
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-43090
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-43051
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-0032
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2023-21125
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-26466
MEDIUM 5.9
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of p… |
|
CVE-2025-21755
HIGH · vendor
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
|
CVE-2025-1426
HIGH 8.8
Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted … |
|
CVE-2025-1006
HIGH 8.8
Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. (Chr… |
|
CVE-2025-0999
HIGH 8.8
Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
|
CVE-2025-26465
MEDIUM 6.8
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impers… |
|
CVE-2025-1414
MEDIUM 6.5
Memory safety bugs present in Firefox 135. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
|
CVE-2025-0997
HIGH 8.1
Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte… |
|
CVE-2025-0996
MEDIUM 5.4
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (U… |
|
CVE-2025-0995
HIGH 8.8
Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
|
CVE-2025-21394
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21391
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2025-21390
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21387
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21386
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21383
HIGH 7.8
Microsoft Excel Information Disclosure Vulnerability |
|
CVE-2025-21381
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2025-21259
MEDIUM 5.3
Microsoft Outlook Spoofing Vulnerability |
|
CVE-2025-21420
HIGH · vendor
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability |
|
CVE-2025-21419
HIGH · vendor
Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
|
CVE-2025-21418
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2025-21414
HIGH · vendor
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2025-21410
HIGH · vendor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
|
CVE-2025-21407
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21406
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21379
CRITICAL · vendor
DHCP Client Service Remote Code Execution Vulnerability |
|
CVE-2025-21377
HIGH · vendor
NTLM Hash Disclosure Spoofing Vulnerability |
|
CVE-2025-21376
CRITICAL · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2025-21375
HIGH · vendor
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
|
CVE-2025-21373
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21371
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21369
HIGH · vendor
Microsoft Digest Authentication Remote Code Execution Vulnerability |
|
CVE-2025-21368
HIGH · vendor
Microsoft Digest Authentication Remote Code Execution Vulnerability |
|
CVE-2025-21367
HIGH · vendor
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2025-21359
HIGH · vendor
Windows Kernel Security Feature Bypass Vulnerability |
|
CVE-2025-21358
HIGH · vendor
Windows Core Messaging Elevation of Privileges Vulnerability |
|
CVE-2025-21352
HIGH · vendor
Internet Connection Sharing (ICS) Denial of Service Vulnerability |
|
CVE-2025-21351
HIGH · vendor
Windows Active Directory Domain Services API Denial of Service Vulnerability |
|
CVE-2025-21350
HIGH · vendor
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2025-21349
HIGH · vendor
Windows Remote Desktop Configuration Service Tampering Vulnerability |
|
CVE-2025-21347
HIGH · vendor
Windows Deployment Services Denial of Service Vulnerability |
|
CVE-2025-21337
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.