Vulnerabilities
Tracked app vulnerabilities
19,680 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,680
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-26925
Windows LSA Spoofing Vulnerability |
|
CVE-2022-26923
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2022-26913
HIGH · vendor
Windows Authentication Information Disclosure Vulnerability |
|
CVE-2022-24466
HIGH · vendor
Windows Hyper-V Security Feature Bypass Vulnerability |
|
CVE-2022-23279
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-23270
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-22713
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2022-22019
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2022-22017
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2022-22016
HIGH · vendor
Windows PlayToManager Elevation of Privilege Vulnerability |
|
CVE-2022-22015
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
|
CVE-2022-22014
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-22013
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-22012
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-22011
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-21972
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-29072
HIGH 7.8
7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area. This … |
|
CVE-2022-26903
HIGH 7.8
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2022-26901
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2022-26826
HIGH 7.2
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26795
HIGH 7.8
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-24545
HIGH 8.1
Windows Kerberos Remote Code Execution Vulnerability |
|
CVE-2022-24486
HIGH 7.8
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2015-20107
HIGH 7.6
In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow att… |
|
CVE-2022-26920
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-26919
CRITICAL · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-26918
HIGH · vendor
Windows Fax Compose Form Remote Code Execution Vulnerability |
|
CVE-2022-26917
HIGH · vendor
Windows Fax Compose Form Remote Code Execution Vulnerability |
|
CVE-2022-26916
HIGH · vendor
Windows Fax Compose Form Remote Code Execution Vulnerability |
|
CVE-2022-26915
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-26914
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-26904
Windows User Profile Service Elevation of Privilege Vulnerability |
|
CVE-2022-26831
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2022-26830
HIGH · vendor
DiskUsage.exe Remote Code Execution Vulnerability |
|
CVE-2022-26829
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26828
HIGH · vendor
Windows Bluetooth Driver Elevation of Privilege Vulnerability |
|
CVE-2022-26827
HIGH · vendor
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2022-26825
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26824
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26823
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26822
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26821
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26820
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26819
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26818
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26817
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26816
HIGH · vendor
Windows DNS Server Information Disclosure Vulnerability |
|
CVE-2022-26815
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26814
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26813
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.