Vulnerabilities
Tracked app vulnerabilities
19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,679
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-35755
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-35754
HIGH · vendor
Unified Write Filter Elevation of Privilege Vulnerability |
|
CVE-2022-35753
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2022-35752
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2022-35751
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2022-35750
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-35749
HIGH · vendor
Windows Digital Media Receiver Elevation of Privilege Vulnerability |
|
CVE-2022-35748
HIGH · vendor
HTTP.sys Denial of Service Vulnerability |
|
CVE-2022-35747
HIGH · vendor
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability |
|
CVE-2022-35746
HIGH · vendor
Windows Digital Media Receiver Elevation of Privilege Vulnerability |
|
CVE-2022-35745
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2022-35744
CRITICAL · vendor
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability |
|
CVE-2022-35743
HIGH · vendor
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
|
CVE-2022-34715
HIGH · vendor
Windows Network File System Remote Code Execution Vulnerability |
|
CVE-2022-34714
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2022-34713
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
|
CVE-2022-34712
HIGH · vendor
Windows Defender Credential Guard Information Disclosure Vulnerability |
|
CVE-2022-34711
HIGH · vendor
Windows Defender Credential Guard Elevation of Privilege Vulnerability |
|
CVE-2022-34710
HIGH · vendor
Windows Defender Credential Guard Information Disclosure Vulnerability |
|
CVE-2022-34709
HIGH · vendor
Windows Defender Credential Guard Security Feature Bypass Vulnerability |
|
CVE-2022-34708
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2022-34707
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-34706
HIGH · vendor
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
|
CVE-2022-34705
HIGH · vendor
Windows Defender Credential Guard Elevation of Privilege Vulnerability |
|
CVE-2022-34704
HIGH · vendor
Windows Defender Credential Guard Information Disclosure Vulnerability |
|
CVE-2022-34703
HIGH · vendor
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2022-34702
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2022-34701
HIGH · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
|
CVE-2022-34699
HIGH · vendor
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-34696
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2022-34691
CRITICAL · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2022-34690
HIGH · vendor
Windows Fax Service Elevation of Privilege Vulnerability |
|
CVE-2022-34303
HIGH · vendor
CERT/CC: CVE-20220-34303 Crypto Pro Boot Loader Bypass |
|
CVE-2022-34302
HIGH · vendor
CERT/CC: CVE-2022-34302 New Horizon Data Systems Inc Boot Loader Bypass |
|
CVE-2022-34301
HIGH · vendor
CERT/CC: CVE-2022-34301 Eurosoft Boot Loader Bypass |
|
CVE-2022-33670
HIGH · vendor
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2022-30197
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2022-30194
HIGH · vendor
Windows WebBrowser Control Remote Code Execution Vulnerability |
|
CVE-2022-30144
HIGH · vendor
Windows Bluetooth Service Remote Code Execution Vulnerability |
|
CVE-2022-30133
CRITICAL · vendor
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability |
|
CVE-2022-35737
HIGH 7.5
SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API. |
|
CVE-2022-2399
HIGH 8.8
Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2481
HIGH 8.8
Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engage in specific user interactions to pote… |
|
CVE-2022-2480
HIGH 8.8
Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
|
CVE-2022-2479
MEDIUM 4.3
Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a ma… |
|
CVE-2022-2478
HIGH 8.8
Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2477
HIGH 8.8
Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially … |
|
CVE-2022-2296
HIGH 8.8
Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in specific us… |
|
CVE-2022-2295
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2294
HIGH 8.8
KEV
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.