Vulnerabilities
Tracked app vulnerabilities
19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,679
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-2855
HIGH 8.8
Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2854
HIGH 8.8
Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2853
HIGH 8.8
Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to pot… |
|
CVE-2022-2852
HIGH 8.8
Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2022-38006
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-38005
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-38004
HIGH · vendor
Windows Fax Service Remote Code Execution Vulnerability |
|
CVE-2022-37959
HIGH · vendor
Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability |
|
CVE-2022-37958
CRITICAL · vendor
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
|
CVE-2022-37957
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37956
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37955
HIGH · vendor
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2022-37954
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-35841
HIGH · vendor
Windows Enterprise App Management Service Remote Code Execution Vulnerability |
|
CVE-2022-35840
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35838
HIGH · vendor
HTTP V3 Denial of Service Vulnerability |
|
CVE-2022-35837
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-35836
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35835
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35834
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35833
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-35832
HIGH · vendor
Windows Event Tracing Denial of Service Vulnerability |
|
CVE-2022-35831
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2022-35830
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2022-35803
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2022-34734
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34733
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-34732
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34731
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-34730
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34729
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2022-34728
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-34727
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34726
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34725
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-34724
HIGH · vendor
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2022-34723
HIGH · vendor
Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability |
|
CVE-2022-34722
CRITICAL · vendor
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
|
CVE-2022-34721
CRITICAL · vendor
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
|
CVE-2022-34720
HIGH · vendor
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
|
CVE-2022-34719
HIGH · vendor
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
|
CVE-2022-34718
CRITICAL · vendor
Windows TCP/IP Remote Code Execution Vulnerability |
|
CVE-2022-33679
HIGH · vendor
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2022-33647
HIGH · vendor
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2022-30200
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-30196
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-30170
HIGH · vendor
Windows Credential Roaming Service Elevation of Privilege Vulnerability |
|
CVE-2022-26928
HIGH · vendor
Windows Photo Import API Elevation of Privilege Vulnerability |
|
CVE-2020-35538
HIGH · vendor
Microsoft Security Update Guide entry — NVD enrichira. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.