Vulnerabilities
Tracked app vulnerabilities
19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,679
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-38046
HIGH · vendor
Web Account Manager Information Disclosure Vulnerability |
|
CVE-2022-38045
HIGH · vendor
Windows Server Service Elevation of Privilege Vulnerability |
|
CVE-2022-38044
HIGH · vendor
Windows CD-ROM File System Driver Remote Code Execution Vulnerability |
|
CVE-2022-38043
HIGH · vendor
Windows Security Support Provider Interface Information Disclosure Vulnerability |
|
CVE-2022-38042
HIGH · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2022-38041
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-38040
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-38039
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38038
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38037
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38036
HIGH · vendor
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
|
CVE-2022-38034
HIGH · vendor
Windows Workstation Service Elevation of Privilege Vulnerability |
|
CVE-2022-38033
HIGH · vendor
Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability |
|
CVE-2022-38032
HIGH · vendor
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability |
|
CVE-2022-38031
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-38030
HIGH · vendor
Windows USB Serial Driver Information Disclosure Vulnerability |
|
CVE-2022-38029
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-38028
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-38027
HIGH · vendor
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2022-38026
HIGH · vendor
Windows DHCP Client Information Disclosure Vulnerability |
|
CVE-2022-38025
HIGH · vendor
Windows Distributed File System (DFS) Information Disclosure Vulnerability |
|
CVE-2022-38022
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38021
HIGH · vendor
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
|
CVE-2022-38016
HIGH · vendor
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
|
CVE-2022-38003
HIGH · vendor
Windows Resilient File System Elevation of Privilege |
|
CVE-2022-38000
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-37999
HIGH · vendor
Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
|
CVE-2022-37998
HIGH · vendor
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2022-37997
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2022-37996
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2022-37995
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37994
HIGH · vendor
Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
|
CVE-2022-37993
HIGH · vendor
Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
|
CVE-2022-37991
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37990
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37989
HIGH · vendor
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
|
CVE-2022-37988
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37987
HIGH · vendor
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
|
CVE-2022-37986
HIGH · vendor
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-37985
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-37984
HIGH · vendor
Windows WLAN Service Elevation of Privilege Vulnerability |
|
CVE-2022-37983
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2022-37982
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-37981
HIGH · vendor
Windows Event Logging Service Denial of Service Vulnerability |
|
CVE-2022-37980
HIGH · vendor
Windows DHCP Client Elevation of Privilege Vulnerability |
|
CVE-2022-37979
CRITICAL · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2022-37978
HIGH · vendor
Windows Active Directory Certificate Services Security Feature Bypass |
|
CVE-2022-37977
HIGH · vendor
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
|
CVE-2022-37976
CRITICAL · vendor
Active Directory Certificate Services Elevation of Privilege Vulnerability |
|
CVE-2022-37975
HIGH · vendor
Windows Group Policy Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.