Vulnerabilities

Tracked app vulnerabilities

1,721 CVEs affect a tracked app or OS (Critical, Windows). 37 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 1,721
Actively exploited: 37
Publication window: 2007-08-28 → 2026-11-10

All CVEs 1,721 CISA KEV 37 Public exploit 44 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

1,721 entries Critical Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2022-0977 CRITICAL 9.6 2022-07-21 Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user inte…	CRITICAL 9.6	—		2022-07-21
CVE-2022-0973 CRITICAL 9.6 2022-07-21 Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CRITICAL 9.6	—		2022-07-21
CVE-2022-30221 CRITICAL · vendor Windows 2022-07-12 Windows Graphics Component Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-07-12
CVE-2022-22039 CRITICAL · vendor Windows 2022-07-12 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-07-12
CVE-2022-22038 CRITICAL · vendor Windows 2022-07-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-07-12
CVE-2022-22029 CRITICAL · vendor Windows 2022-07-12 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-07-12
CVE-2022-30163 CRITICAL · vendor Windows 2022-06-14 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-06-14
CVE-2022-30139 CRITICAL · vendor Windows 2022-06-14 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-06-14
CVE-2022-30136 CRITICAL · vendor Windows 2022-06-14 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-06-14
CVE-2022-26937 CRITICAL · vendor Windows 2022-05-10 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-05-10
CVE-2022-26923 CRITICAL · vendor KEV Windows 2022-05-10 Active Directory Domain Services Elevation of Privilege Vulnerability	CRITICAL · vendor	KEV	Windows	2022-05-10
CVE-2022-23270 CRITICAL · vendor Windows 2022-05-10 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-05-10
CVE-2022-22017 CRITICAL · vendor Windows 2022-05-10 Remote Desktop Client Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-05-10
CVE-2022-21972 CRITICAL · vendor Windows 2022-05-10 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-05-10
CVE-2022-26919 CRITICAL · vendor Windows 2022-04-12 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-26809 CRITICAL · vendor Windows 2022-04-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-24541 CRITICAL · vendor Windows 2022-04-12 Windows Server Service Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-24537 CRITICAL · vendor Windows 2022-04-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-24500 CRITICAL · vendor Windows 2022-04-12 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-24497 CRITICAL · vendor Windows 2022-04-12 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-24491 CRITICAL · vendor Windows 2022-04-12 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-23257 CRITICAL · vendor Windows 2022-04-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-22008 CRITICAL · vendor Windows 2022-04-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-04-12
CVE-2022-0790 CRITICAL 9.6 2022-04-05 Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to poten…	CRITICAL 9.6	—		2022-04-05
CVE-2022-0466 CRITICAL 9.6 2022-04-05 Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious exte…	CRITICAL 9.6	—		2022-04-05
CVE-2022-0452 CRITICAL 9.6 2022-04-05 Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag…	CRITICAL 9.6	—		2022-04-05
CVE-2022-0290 CRITICAL 9.6 2022-02-12 Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pa…	CRITICAL 9.6	—		2022-02-12
CVE-2022-0097 CRITICAL 9.6 2022-02-12 Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to…	CRITICAL 9.6	—		2022-02-12
CVE-2022-21912 CRITICAL · vendor Windows 2022-01-11 DirectX Graphics Kernel Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21907 CRITICAL · vendor Windows 2022-01-11 HTTP Protocol Stack Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21898 CRITICAL · vendor Windows 2022-01-11 DirectX Graphics Kernel Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21857 CRITICAL · vendor Windows 2022-01-11 Active Directory Domain Services Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21833 CRITICAL · vendor Windows 2022-01-11 Virtual Machine IDE Drive Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2021-38013 CRITICAL 9.6 2021-12-23 Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI render…	CRITICAL 9.6	—		2021-12-23
CVE-2021-43233 CRITICAL · vendor Windows 2021-12-14 Remote Desktop Client Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-12-14
CVE-2021-43217 CRITICAL · vendor Windows 2021-12-14 Windows Encrypting File System (EFS) Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-12-14
CVE-2021-43215 CRITICAL · vendor Windows 2021-12-14 iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution	CRITICAL · vendor	—	Windows	2021-12-14
CVE-2021-38503 CRITICAL 10.0 2021-12-08 The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the …	CRITICAL 10.0	—		2021-12-08
CVE-2021-38002 CRITICAL 9.6 2021-11-23 Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag…	CRITICAL 9.6	—		2021-11-23
CVE-2021-26443 CRITICAL 9.0 Windows 2021-11-10 Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability	CRITICAL 9.0	—	Windows	2021-11-10
CVE-2020-6492 CRITICAL 9.6 2021-11-02 Use after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.	CRITICAL 9.6	—		2021-11-02
CVE-2021-37981 CRITICAL 9.6 2021-11-02 Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to potentially perform a…	CRITICAL 9.6	—		2021-11-02
CVE-2021-40461 CRITICAL · vendor Windows 2021-10-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-10-12
CVE-2021-38672 CRITICAL · vendor Windows 2021-10-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-10-12
CVE-2021-37973 CRITICAL 9.6 KEV 2021-10-08 Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sa…	CRITICAL 9.6	KEV		2021-10-08
CVE-2021-30633 CRITICAL 9.6 KEV 2021-10-08 Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perfo…	CRITICAL 9.6	KEV		2021-10-08
CVE-2021-26432 CRITICAL 9.8 Windows 2021-08-12 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-08-12
CVE-2021-26424 CRITICAL 9.9 Windows 2021-08-12 Windows TCP/IP Remote Code Execution Vulnerability	CRITICAL 9.9	—	Windows	2021-08-12
CVE-2021-30571 CRITICAL 9.6 2021-08-03 Insufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension t…	CRITICAL 9.6	—		2021-08-03
CVE-2021-34458 CRITICAL 9.9 Windows 2021-07-16 Windows Kernel Remote Code Execution Vulnerability	CRITICAL 9.9	—	Windows	2021-07-16

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM