Vulnerabilities
Tracked app vulnerabilities
28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,052
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-21297
CRITICAL · vendor
Windows Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2025-21296
CRITICAL · vendor
BranchCache Remote Code Execution Vulnerability |
|
CVE-2025-21295
CRITICAL · vendor
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
|
CVE-2025-21294
CRITICAL · vendor
Microsoft Digest Authentication Remote Code Execution Vulnerability |
|
CVE-2025-21293
HIGH · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2025-21292
HIGH · vendor
Windows Search Service Elevation of Privilege Vulnerability |
|
CVE-2025-21291
HIGH · vendor
Windows Direct Show Remote Code Execution Vulnerability |
|
CVE-2025-21290
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21289
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21288
HIGH · vendor
Windows COM Server Information Disclosure Vulnerability |
|
CVE-2025-21287
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21286
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21285
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21284
HIGH · vendor
Windows Virtual Trusted Platform Module Denial of Service Vulnerability |
|
CVE-2025-21282
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21281
HIGH · vendor
Microsoft COM for Windows Elevation of Privilege Vulnerability |
|
CVE-2025-21280
HIGH · vendor
Windows Virtual Trusted Platform Module Denial of Service Vulnerability |
|
CVE-2025-21278
HIGH · vendor
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2025-21277
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21276
HIGH · vendor
Windows MapUrlToZone Denial of Service Vulnerability |
|
CVE-2025-21275
HIGH · vendor
Windows App Package Installer Elevation of Privilege Vulnerability |
|
CVE-2025-21274
HIGH · vendor
Windows Event Tracing Denial of Service Vulnerability |
|
CVE-2025-21273
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21272
HIGH · vendor
Windows COM Server Information Disclosure Vulnerability |
|
CVE-2025-21271
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2025-21270
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21269
HIGH · vendor
Windows HTML Platforms Security Feature Bypass Vulnerability |
|
CVE-2025-21268
HIGH · vendor
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21266
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21265
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21263
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21261
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21260
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21258
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21257
HIGH · vendor
Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
|
CVE-2025-21256
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21255
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21252
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21251
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21250
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21249
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21248
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21246
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21245
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21244
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21243
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21242
HIGH · vendor
Windows Kerberos Information Disclosure Vulnerability |
|
CVE-2025-21241
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21240
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21239
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.