Vulnerabilities

Tracked app vulnerabilities

19,681 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,681
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-20

All CVEs 19,681 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,681 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2022-21907 CRITICAL · vendor Windows 2022-01-11 HTTP Protocol Stack Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21906 HIGH · vendor Windows 2022-01-11 Windows Defender Application Control Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21905 HIGH · vendor Windows 2022-01-11 Windows Hyper-V Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21904 HIGH · vendor Windows 2022-01-11 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21903 HIGH · vendor Windows 2022-01-11 Windows GDI Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21902 HIGH · vendor Windows 2022-01-11 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21901 HIGH · vendor Windows 2022-01-11 Windows Hyper-V Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21900 HIGH · vendor Windows 2022-01-11 Windows Hyper-V Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21898 CRITICAL · vendor Windows 2022-01-11 DirectX Graphics Kernel Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21897 HIGH · vendor Windows 2022-01-11 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21896 HIGH · vendor Windows 2022-01-11 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21895 HIGH · vendor Windows 2022-01-11 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21894 HIGH · vendor Windows 2022-01-11 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21893 HIGH · vendor Windows 2022-01-11 Remote Desktop Protocol Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21892 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21890 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21889 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21888 HIGH · vendor Windows 2022-01-11 Windows Modern Execution Server Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21887 HIGH · vendor Windows 2022-01-11 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21885 HIGH · vendor Windows 2022-01-11 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21884 HIGH · vendor Windows 2022-01-11 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21883 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21881 HIGH · vendor Windows 2022-01-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21880 HIGH · vendor Windows 2022-01-11 Windows GDI+ Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21879 HIGH · vendor Windows 2022-01-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21878 HIGH · vendor Windows 2022-01-11 Windows Geolocation Service Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21877 HIGH · vendor Windows 2022-01-11 Storage Spaces Controller Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21876 HIGH · vendor Windows 2022-01-11 Win32k Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21875 HIGH · vendor Windows 2022-01-11 Windows Storage Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21874 HIGH · vendor Windows 2022-01-11 Windows Security Center API Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21873 HIGH · vendor Windows 2022-01-11 Tile Data Repository Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21872 HIGH · vendor Windows 2022-01-11 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21871 HIGH · vendor Windows 2022-01-11 Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21870 HIGH · vendor Windows 2022-01-11 Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21869 HIGH · vendor Windows 2022-01-11 Clipboard User Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21868 HIGH · vendor Windows 2022-01-11 Windows Devices Human Interface Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21867 HIGH · vendor Windows 2022-01-11 Windows Push Notifications Apps Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21866 HIGH · vendor Windows 2022-01-11 Windows System Launcher Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21865 HIGH · vendor Windows 2022-01-11 Connected Devices Platform Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21864 HIGH · vendor Windows 2022-01-11 Windows UI Immersive Server API Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21863 HIGH · vendor Windows 2022-01-11 Windows StateRepository API Server file Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21862 HIGH · vendor Windows 2022-01-11 Windows Application Model Core API Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21861 HIGH · vendor Windows 2022-01-11 Task Flow Data Engine Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21860 HIGH · vendor Windows 2022-01-11 Windows AppContracts API Server Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21859 HIGH · vendor Windows 2022-01-11 Windows Accounts Control Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21858 HIGH · vendor Windows 2022-01-11 Windows Bind Filter Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21857 CRITICAL · vendor Windows 2022-01-11 Active Directory Domain Services Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21852 HIGH · vendor Windows 2022-01-11 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21851 HIGH · vendor Windows 2022-01-11 Remote Desktop Client Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21850 HIGH · vendor Windows 2022-01-11 Remote Desktop Client Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM