Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,679
Actively exploited
303
Publication window
1997-01-01 → 2026-10-20

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,679 entries Windows Clear all
CVE
CVE-2022-1129
MEDIUM 6.5

Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omni…

CVE-2022-1128
MEDIUM 6.5

Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross…

CVE-2022-1127
HIGH 8.8

Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interacti…

CVE-2022-1125
HIGH 8.8

Use after free in Portals in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to pote…

CVE-2022-1096
HIGH 8.8 KEV

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-0980
HIGH 8.8

Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially …

CVE-2022-0979
HIGH 8.8

Use after free in Safe Browsing in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user int…

CVE-2022-0978
HIGH 8.8

Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-0977
CRITICAL 9.6

Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user inte…

CVE-2022-0976
HIGH 8.8

Heap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-0975
HIGH 8.8

Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-0974
HIGH 8.8

Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user int…

CVE-2022-0973
CRITICAL 9.6

Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-0972
HIGH 8.8

Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially ex…

CVE-2022-0971
HIGH 8.8

Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer process to potentia…

CVE-2022-33644
HIGH · vendor

Xbox Live Save Service Elevation of Privilege Vulnerability

CVE-2022-30226
HIGH · vendor

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-30225
HIGH · vendor

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability

CVE-2022-30224
HIGH · vendor

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2022-30223
HIGH · vendor

Windows Hyper-V Information Disclosure Vulnerability

CVE-2022-30222
HIGH · vendor

Windows Shell Remote Code Execution Vulnerability

CVE-2022-30221
CRITICAL · vendor

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2022-30220
HIGH · vendor

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2022-30216
HIGH · vendor

Windows Server Service Tampering Vulnerability

CVE-2022-30215
HIGH · vendor

Active Directory Federation Services Elevation of Privilege Vulnerability

CVE-2022-30214
HIGH · vendor

Windows DNS Server Remote Code Execution Vulnerability

CVE-2022-30213
HIGH · vendor

Windows GDI+ Information Disclosure Vulnerability

CVE-2022-30212
HIGH · vendor

Windows Connected Devices Platform Service Information Disclosure Vulnerability

CVE-2022-30211
HIGH · vendor

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

CVE-2022-30209
HIGH · vendor

Windows IIS Server Elevation of Privilege Vulnerability

CVE-2022-30208
HIGH · vendor

Windows Security Account Manager (SAM) Denial of Service Vulnerability

CVE-2022-30206
HIGH · vendor

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-30205
HIGH · vendor

Windows Group Policy Elevation of Privilege Vulnerability

CVE-2022-30203
HIGH · vendor

Windows Boot Manager Security Feature Bypass Vulnerability

CVE-2022-30202
HIGH · vendor

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2022-29900
HIGH · vendor

AMD: CVE-2022-29900 AMD CPU Branch Type Confusion

CVE-2022-23825
HIGH · vendor

AMD: CVE-2022-23825 AMD CPU Branch Type Confusion

CVE-2022-22711
HIGH · vendor

Windows BitLocker Information Disclosure Vulnerability

CVE-2022-22050
HIGH · vendor

Windows Fax Service Elevation of Privilege Vulnerability

CVE-2022-22049
HIGH · vendor

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2022-22048
HIGH · vendor

BitLocker Security Feature Bypass Vulnerability

CVE-2022-22047
HIGH · vendor KEV

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2022-22045
HIGH · vendor

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

CVE-2022-22043
HIGH · vendor

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

CVE-2022-22042
HIGH · vendor

Windows Hyper-V Information Disclosure Vulnerability

CVE-2022-22041
HIGH · vendor

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-22040
HIGH · vendor

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability

CVE-2022-22039
CRITICAL · vendor

Windows Network File System Remote Code Execution Vulnerability

CVE-2022-22038
CRITICAL · vendor

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVE-2022-22037
HIGH · vendor

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM