Vulnerabilities
Tracked app vulnerabilities
28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,052
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2025-21238
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21237
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21236
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21235
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-21234
HIGH · vendor
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
|
CVE-2025-21233
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21232
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21231
HIGH · vendor
IP Helper Denial of Service Vulnerability |
|
CVE-2025-21230
HIGH · vendor
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
|
CVE-2025-21229
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21228
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21227
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21226
HIGH · vendor
Windows Digital Media Elevation of Privilege Vulnerability |
|
CVE-2025-21225
HIGH · vendor
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2025-21224
HIGH · vendor
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
|
CVE-2025-21223
HIGH · vendor
Windows Telephony Service Remote Code Execution Vulnerability |
|
CVE-2025-21220
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2025-21219
HIGH · vendor
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2025-21218
HIGH · vendor
Windows Kerberos Denial of Service Vulnerability |
|
CVE-2025-21217
HIGH · vendor
Windows NTLM Spoofing Vulnerability |
|
CVE-2025-21215
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2025-21214
HIGH · vendor
Windows BitLocker Information Disclosure Vulnerability |
|
CVE-2025-21213
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2025-21211
HIGH · vendor
Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2025-21210
HIGH · vendor
Windows BitLocker Information Disclosure Vulnerability |
|
CVE-2025-21207
HIGH · vendor
Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability |
|
CVE-2025-21202
HIGH · vendor
Windows Recovery Environment Agent Elevation of Privilege Vulnerability |
|
CVE-2025-21193
HIGH · vendor
Active Directory Federation Server Spoofing Vulnerability |
|
CVE-2025-21189
HIGH · vendor
MapUrlToZone Security Feature Bypass Vulnerability |
|
CVE-2024-7344
HIGH · vendor
Cert CC: CVE-2024-7344 Howyar Taiwan Secure Boot Bypass |
|
CVE-2025-23109
MEDIUM 6.5
Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address. This vulnerability was fixed in Firefox for i… |
|
CVE-2025-23108
MEDIUM 4.3
Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnera… |
|
CVE-2025-0291
HIGH 8.8
Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
|
CVE-2025-0247
CRITICAL 9.8
Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s… |
|
CVE-2025-0246
MEDIUM 6.5
When using an invalid protocol scheme, an attacker could spoof the address bar. *Note: This issue only affected Android operating systems. Other operating sys… |
|
CVE-2025-0245
LOW 3.3
Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability was fixe… |
|
CVE-2025-0244
MEDIUM 5.3
When redirecting to an invalid protocol scheme, an attacker could spoof the address bar. *Note: This issue only affected Android operating systems. Other oper… |
|
CVE-2025-0243
MEDIUM 5.1
Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption a… |
|
CVE-2025-0242
MEDIUM 6.5
Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bug… |
|
CVE-2025-0241
HIGH 7.7
When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 1… |
|
CVE-2025-0240
MEDIUM 4.0
Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability w… |
|
CVE-2025-0239
MEDIUM 4.0
When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability was fixed in Fi… |
|
CVE-2025-0238
MEDIUM 5.3
Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability … |
|
CVE-2025-0237
MEDIUM 5.4
The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal bein… |
|
CVE-2024-49749
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49748
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49747
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49745
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49744
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2024-49742
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.