Vulnerabilities
Tracked app vulnerabilities
19,680 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,680
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-0457
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0456
HIGH 8.8
Use after free in Web Search in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via profile destruction. |
|
CVE-2022-0455
MEDIUM 6.5
Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98.0.4758.80 allowed a remote attacker to spoof the contents of the Omnib… |
|
CVE-2022-0454
HIGH 8.8
Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0453
HIGH 8.8
Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process to potentially exploit … |
|
CVE-2022-0452
CRITICAL 9.6
Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag… |
|
CVE-2022-0610
HIGH 8.8
Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a craf… |
|
CVE-2022-0609
HIGH 8.8
KEV
Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0608
HIGH 8.8
Integer overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0607
HIGH 8.8
Use after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0606
HIGH 8.8
Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-0605
HIGH 8.8
Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced … |
|
CVE-2022-0604
HIGH 8.8
Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage… |
|
CVE-2022-0603
HIGH 8.8
Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a craf… |
|
CVE-2018-25032
HIGH 7.5
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. |
|
CVE-2022-23960
Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared … |
|
CVE-2022-26488
HIGH 7.0
In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker t… |
|
CVE-2021-3733
MEDIUM 6.5
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects … |
|
CVE-2022-24511
MEDIUM 5.5
Microsoft Office Word Tampering Vulnerability |
|
CVE-2022-24525
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2022-24508
HIGH · vendor
Win32 File Enumeration Remote Code Execution Vulnerability |
|
CVE-2022-24507
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2022-24505
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-24503
HIGH · vendor
Remote Desktop Protocol Client Information Disclosure Vulnerability |
|
CVE-2022-24502
HIGH · vendor
Windows HTML Platforms Security Feature Bypass Vulnerability |
|
CVE-2022-24460
HIGH · vendor
Tablet Windows User Interface Application Elevation of Privilege Vulnerability |
|
CVE-2022-24459
HIGH · vendor
Windows Fax and Scan Service Elevation of Privilege Vulnerability |
|
CVE-2022-24455
HIGH · vendor
Windows CD-ROM Driver Elevation of Privilege Vulnerability |
|
CVE-2022-24454
HIGH · vendor
Windows Security Support Provider Interface Elevation of Privilege Vulnerability |
|
CVE-2022-23299
HIGH · vendor
Windows PDEV Elevation of Privilege Vulnerability |
|
CVE-2022-23298
HIGH · vendor
Windows NT OS Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-23297
HIGH · vendor
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability |
|
CVE-2022-23296
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2022-23294
HIGH · vendor
Windows Event Tracing Remote Code Execution Vulnerability |
|
CVE-2022-23293
HIGH · vendor
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability |
|
CVE-2022-23291
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2022-23290
HIGH · vendor
Windows Inking COM Elevation of Privilege Vulnerability |
|
CVE-2022-23288
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2022-23287
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-23286
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2022-23285
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2022-23284
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-23283
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-23281
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2022-23253
HIGH · vendor
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
|
CVE-2022-22010
HIGH · vendor
Media Foundation Information Disclosure Vulnerability |
|
CVE-2022-21990
HIGH · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2022-21977
HIGH · vendor
Media Foundation Information Disclosure Vulnerability |
|
CVE-2022-21975
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2022-21967
HIGH · vendor
Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.