Vulnerabilities

Tracked app vulnerabilities

19,681 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,681
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-20

All CVEs 19,681 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,681 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2022-21849 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21848 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21847 HIGH · vendor Windows 2022-01-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21843 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21839 HIGH · vendor Windows 2022-01-11 Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21838 HIGH · vendor Windows 2022-01-11 Windows Cleanup Manager Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21836 HIGH · vendor Windows 2022-01-11 Windows Certificate Spoofing Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21835 HIGH · vendor Windows 2022-01-11 Microsoft Cryptographic Services Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21834 HIGH · vendor Windows 2022-01-11 Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21833 CRITICAL · vendor Windows 2022-01-11 Virtual Machine IDE Drive Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2021-36976 HIGH · vendor Windows 2022-01-11 Libarchive Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2021-4079 HIGH 8.8 2021-12-23 Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packet…	HIGH 8.8	—		2021-12-23
CVE-2021-4078 HIGH 8.8 2021-12-23 Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4068 MEDIUM 6.5 2021-12-23 Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-4067 HIGH 8.8 2021-12-23 Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf…	HIGH 8.8	—		2021-12-23
CVE-2021-4066 HIGH 8.8 2021-12-23 Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4065 HIGH 8.8 2021-12-23 Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4064 HIGH 8.8 2021-12-23 Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf…	HIGH 8.8	—		2021-12-23
CVE-2021-4063 HIGH 8.8 2021-12-23 Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…	HIGH 8.8	—		2021-12-23
CVE-2021-4062 HIGH 8.8 2021-12-23 Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploi…	HIGH 8.8	—		2021-12-23
CVE-2021-4061 HIGH 8.8 2021-12-23 Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4059 MEDIUM 6.5 2021-12-23 Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-4058 HIGH 8.8 2021-12-23 Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4057 HIGH 8.8 2021-12-23 Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit hea…	HIGH 8.8	—		2021-12-23
CVE-2021-4056 HIGH 8.8 2021-12-23 Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4055 HIGH 8.8 2021-12-23 Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentia…	HIGH 8.8	—		2021-12-23
CVE-2021-4054 MEDIUM 6.5 2021-12-23 Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-4053 HIGH 8.8 2021-12-23 Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-4052 HIGH 8.8 2021-12-23 Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially expl…	HIGH 8.8	—		2021-12-23
CVE-2021-38022 MEDIUM 6.5 2021-12-23 Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML…	MEDIUM 6.5	—		2021-12-23
CVE-2021-38021 MEDIUM 6.5 2021-12-23 Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML …	MEDIUM 6.5	—		2021-12-23
CVE-2021-38020 MEDIUM 4.3 2021-12-23 Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omn…	MEDIUM 4.3	—		2021-12-23
CVE-2021-38019 MEDIUM 6.5 2021-12-23 Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-38018 MEDIUM 6.5 2021-12-23 Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-38017 HIGH 8.8 2021-12-23 Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a craf…	HIGH 8.8	—		2021-12-23
CVE-2021-38016 HIGH 8.8 2021-12-23 Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted…	HIGH 8.8	—		2021-12-23
CVE-2021-38015 HIGH 8.8 2021-12-23 Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypas…	HIGH 8.8	—		2021-12-23
CVE-2021-38014 HIGH 8.8 2021-12-23 Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	HIGH 8.8	—		2021-12-23
CVE-2021-38013 CRITICAL 9.6 2021-12-23 Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI render…	CRITICAL 9.6	—		2021-12-23
CVE-2021-38012 HIGH 8.8 2021-12-23 Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-38011 HIGH 8.8 2021-12-23 Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…	HIGH 8.8	—		2021-12-23
CVE-2021-38010 MEDIUM 6.5 2021-12-23 Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had compromised the renderer process to by…	MEDIUM 6.5	—		2021-12-23
CVE-2021-38009 MEDIUM 6.5 2021-12-23 Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	MEDIUM 6.5	—		2021-12-23
CVE-2021-38008 HIGH 8.8 2021-12-23 Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-38007 HIGH 8.8 2021-12-23 Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-38006 HIGH 8.8 2021-12-23 Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…	HIGH 8.8	—		2021-12-23
CVE-2021-38005 HIGH 8.8 2021-12-23 Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-12-23
CVE-2021-43256 HIGH 7.8 2021-12-15 Microsoft Excel Remote Code Execution Vulnerability	HIGH 7.8	—		2021-12-15
CVE-2021-43226 HIGH 7.8 KEV Windows 2021-12-15 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	KEV	Windows	2021-12-15
CVE-2021-43893 HIGH · vendor Windows 2021-12-14 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-12-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM