Vulnerabilities
Tracked app vulnerabilities
19,679 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,679
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-22036
HIGH · vendor
Performance Counters for Windows Elevation of Privilege Vulnerability |
|
CVE-2022-22034
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2022-22031
HIGH · vendor
Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability |
|
CVE-2022-22029
CRITICAL · vendor
Windows Network File System Remote Code Execution Vulnerability |
|
CVE-2022-22028
HIGH · vendor
Windows Network File System Information Disclosure Vulnerability |
|
CVE-2022-22027
HIGH · vendor
Windows Fax Service Remote Code Execution Vulnerability |
|
CVE-2022-22026
HIGH · vendor
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
|
CVE-2022-22025
HIGH · vendor
Windows Internet Information Services Cachuri Module Denial of Service Vulnerability |
|
CVE-2022-22024
HIGH · vendor
Windows Fax Service Remote Code Execution Vulnerability |
|
CVE-2022-22023
HIGH · vendor
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability |
|
CVE-2022-22022
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-21845
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-20052
MEDIUM 5.0
A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads… |
|
CVE-2022-30173
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2022-21166
MEDIUM 5.5
Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information… |
|
CVE-2022-21125
MEDIUM 5.5
Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure … |
|
CVE-2022-21123
MEDIUM 5.5
Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via l… |
|
CVE-2022-32230
HIGH · vendor
Windows SMB Denial of Service Vulnerability |
|
CVE-2022-30189
HIGH · vendor
Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability |
|
CVE-2022-30166
HIGH · vendor
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability |
|
CVE-2022-30165
HIGH · vendor
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2022-30164
HIGH · vendor
Kerberos AppContainer Security Feature Bypass Vulnerability |
|
CVE-2022-30163
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2022-30162
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2022-30161
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-30160
HIGH · vendor
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
|
CVE-2022-30155
HIGH · vendor
Windows Kernel Denial of Service Vulnerability |
|
CVE-2022-30154
HIGH · vendor
Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability |
|
CVE-2022-30153
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-30152
HIGH · vendor
Windows Network Address Translation (NAT) Denial of Service Vulnerability |
|
CVE-2022-30151
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2022-30150
HIGH · vendor
Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability |
|
CVE-2022-30149
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-30148
HIGH · vendor
Windows Desired State Configuration (DSC) Information Disclosure Vulnerability |
|
CVE-2022-30147
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2022-30146
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-30145
HIGH · vendor
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability |
|
CVE-2022-30143
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-30142
HIGH · vendor
Windows File History Remote Code Execution Vulnerability |
|
CVE-2022-30141
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-30140
HIGH · vendor
Windows iSCSI Discovery Service Remote Code Execution Vulnerability |
|
CVE-2022-30139
CRITICAL · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-30136
CRITICAL · vendor
Windows Network File System Remote Code Execution Vulnerability |
|
CVE-2022-30132
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2022-30131
HIGH · vendor
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2022-21127
HIGH · vendor
Intel: CVE-2022-21127 Special Register Buffer Data Sampling Update (SRBDS Update) |
|
CVE-2022-27776
MEDIUM 6.5
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host… |
|
CVE-2022-30190
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully e… |
|
CVE-2022-26774
HIGH 7.8
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their pr… |
|
CVE-2022-26773
HIGH 7.1
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for w… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.