Vulnerabilities

Tracked app vulnerabilities

19,685 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,685
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-20

All CVEs 19,685 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,685 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2021-30630 MEDIUM 4.3 2021-10-08 Inappropriate implementation in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to leak cross-o…	MEDIUM 4.3	—		2021-10-08
CVE-2021-30629 HIGH 8.8 2021-10-08 Use after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially exploit …	HIGH 8.8	—		2021-10-08
CVE-2021-30628 HIGH 8.8 2021-10-08 Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.	HIGH 8.8	—		2021-10-08
CVE-2021-30627 HIGH 8.8 2021-10-08 Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-10-08
CVE-2021-30626 HIGH 8.8 2021-10-08 Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…	HIGH 8.8	—		2021-10-08
CVE-2021-30625 HIGH 8.8 2021-10-08 Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website to potent…	HIGH 8.8	—		2021-10-08
CVE-2021-22947 MEDIUM 5.9 Windows 2021-09-29 When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and sen…	MEDIUM 5.9	—	Windows	2021-09-29
CVE-2021-40447 HIGH 7.8 Windows 2021-09-15 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-40444 HIGH 8.8 KEV Windows 2021-09-15 Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks th…	HIGH 8.8	KEV	Windows	2021-09-15
CVE-2021-38671 HIGH 7.8 Windows 2021-09-15 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-38669 MEDIUM 6.4 Microsoft Edge 2021-09-15 Microsoft Edge (Chromium-based) Tampering Vulnerability	MEDIUM 6.4	—	Microsoft Edge	2021-09-15
CVE-2021-38667 HIGH 7.8 Windows 2021-09-15 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-38660 HIGH 7.8 2021-09-15 Microsoft Office Graphics Remote Code Execution Vulnerability	HIGH 7.8	—		2021-09-15
CVE-2021-38658 HIGH 7.8 2021-09-15 Microsoft Office Graphics Remote Code Execution Vulnerability	HIGH 7.8	—		2021-09-15
CVE-2021-38655 HIGH 7.8 2021-09-15 Microsoft Excel Remote Code Execution Vulnerability	HIGH 7.8	—		2021-09-15
CVE-2021-38654 HIGH 7.8 2021-09-15 Microsoft Office Visio Remote Code Execution Vulnerability	HIGH 7.8	—		2021-09-15
CVE-2021-38653 HIGH 7.8 2021-09-15 Microsoft Office Visio Remote Code Execution Vulnerability	HIGH 7.8	—		2021-09-15
CVE-2021-38650 HIGH 7.6 2021-09-15 Microsoft Office Spoofing Vulnerability	HIGH 7.6	—		2021-09-15
CVE-2021-38646 HIGH 7.8 KEV 2021-09-15 Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability	HIGH 7.8	KEV		2021-09-15
CVE-2021-38639 HIGH 7.8 Windows 2021-09-15 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-38638 HIGH 7.8 Windows 2021-09-15 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-38637 MEDIUM 5.5 Windows 2021-09-15 Windows Storage Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2021-09-15
CVE-2021-38636 MEDIUM 5.5 Windows 2021-09-15 Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2021-09-15
CVE-2021-38635 MEDIUM 5.5 Windows 2021-09-15 Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2021-09-15
CVE-2021-38634 HIGH 7.1 Windows 2021-09-15 Microsoft Windows Update Client Elevation of Privilege Vulnerability	HIGH 7.1	—	Windows	2021-09-15
CVE-2021-38633 HIGH 7.8 Windows 2021-09-15 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-38632 MEDIUM 5.7 Windows 2021-09-15 Windows BitLocker Security Feature Bypass Vulnerability	MEDIUM 5.7	—	Windows	2021-09-15
CVE-2021-38630 HIGH 7.8 Windows 2021-09-15 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-38629 MEDIUM 6.5 Windows 2021-09-15 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability	MEDIUM 6.5	—	Windows	2021-09-15
CVE-2021-38628 HIGH 7.8 Windows 2021-09-15 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-38624 MEDIUM 6.5 Windows 2021-09-15 Windows Key Storage Provider Security Feature Bypass Vulnerability	MEDIUM 6.5	—	Windows	2021-09-15
CVE-2021-36975 HIGH 7.8 Windows 2021-09-15 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-36974 HIGH 7.8 Windows 2021-09-15 Windows SMB Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-36973 HIGH 7.8 Windows 2021-09-15 Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-36972 MEDIUM 5.5 Windows 2021-09-15 Windows SMB Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2021-09-15
CVE-2021-36969 MEDIUM 5.5 Windows 2021-09-15 Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2021-09-15
CVE-2021-36967 HIGH 8.0 Windows 2021-09-15 Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability	HIGH 8.0	—	Windows	2021-09-15
CVE-2021-36966 HIGH 7.8 Windows 2021-09-15 Windows Subsystem for Linux Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-36965 HIGH 8.8 Windows 2021-09-15 Windows WLAN AutoConfig Service Remote Code Execution Vulnerability	HIGH 8.8	—	Windows	2021-09-15
CVE-2021-36964 HIGH 7.8 Windows 2021-09-15 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-36963 HIGH 7.8 Windows 2021-09-15 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-09-15
CVE-2021-36962 MEDIUM 5.5 Windows 2021-09-15 Windows Installer Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2021-09-15
CVE-2021-36961 MEDIUM 5.5 Windows 2021-09-15 Windows Installer Denial of Service Vulnerability	MEDIUM 5.5	—	Windows	2021-09-15
CVE-2021-36960 HIGH 7.5 Windows 2021-09-15 Windows SMB Information Disclosure Vulnerability	HIGH 7.5	—	Windows	2021-09-15
CVE-2021-36959 MEDIUM 5.5 Windows 2021-09-15 Windows Authenticode Spoofing Vulnerability	MEDIUM 5.5	—	Windows	2021-09-15
CVE-2021-36955 HIGH 7.8 KEV Windows 2021-09-15 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	KEV	Windows	2021-09-15
CVE-2021-36954 HIGH 8.8 Windows 2021-09-15 Windows Bind Filter Driver Elevation of Privilege Vulnerability	HIGH 8.8	—	Windows	2021-09-15
CVE-2021-26435 HIGH 8.1 Windows 2021-09-15 Windows Scripting Engine Memory Corruption Vulnerability	HIGH 8.1	—	Windows	2021-09-15
CVE-2021-40529 MEDIUM 5.9 Mozilla Thunderbird 2021-09-06 The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between tw…	MEDIUM 5.9	—	Mozilla Thunderbird	2021-09-06
CVE-2021-30624 HIGH 8.8 Microsoft Edge 2021-09-03 Chromium: CVE-2021-30624 Use after free in Autofill	HIGH 8.8	—	Microsoft Edge	2021-09-03

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM