Vulnerabilities
Tracked app vulnerabilities
19,685 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,685
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-20
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-30623
HIGH 8.8
Chromium: CVE-2021-30623 Use after free in Bookmarks |
|
CVE-2021-30622
HIGH 8.8
Chromium: CVE-2021-30622 Use after free in WebApp Installs |
|
CVE-2021-30621
MEDIUM 6.5
Chromium: CVE-2021-30621 UI Spoofing in Autofill |
|
CVE-2021-30620
HIGH 8.8
Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink |
|
CVE-2021-30619
MEDIUM 6.5
Chromium: CVE-2021-30619 UI Spoofing in Autofill |
|
CVE-2021-30618
HIGH 8.8
Chromium: CVE-2021-30618 Inappropriate implementation in DevTools |
|
CVE-2021-30617
MEDIUM 6.5
Chromium: CVE-2021-30617 Policy bypass in Blink |
|
CVE-2021-30616
HIGH 8.8
Chromium: CVE-2021-30616 Use after free in Media |
|
CVE-2021-30615
MEDIUM 6.5
Chromium: CVE-2021-30615 Cross-origin data leak in Navigation |
|
CVE-2021-30614
HIGH 8.8
Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip |
|
CVE-2021-30613
HIGH 8.8
Chromium: CVE-2021-30613 Use after free in Base internals |
|
CVE-2021-30612
HIGH 8.8
Chromium: CVE-2021-30612 Use after free in WebRTC |
|
CVE-2021-30611
HIGH 8.8
Chromium: CVE-2021-30611 Use after free in WebRTC |
|
CVE-2021-30610
HIGH 8.8
Chromium: CVE-2021-30610 Use after free in Extensions API |
|
CVE-2021-30609
HIGH 8.8
Chromium: CVE-2021-30609 Use after free in Sign-In |
|
CVE-2021-30608
HIGH 8.8
Chromium: CVE-2021-30608 Use after free in Web Share |
|
CVE-2021-30607
HIGH 8.8
Chromium: CVE-2021-30607 Use after free in Permissions |
|
CVE-2021-30606
HIGH 8.8
Chromium: CVE-2021-30606 Use after free in Blink |
|
CVE-2021-36930
MEDIUM 5.3
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
|
CVE-2021-26436
MEDIUM 6.1
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
|
CVE-2021-30604
HIGH 8.8
Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30603
HIGH 7.5
Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30602
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit h… |
|
CVE-2021-30601
HIGH 8.8
Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potential… |
|
CVE-2021-30600
HIGH 8.8
Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
|
CVE-2021-30599
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
|
CVE-2021-30598
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
|
CVE-2021-30597
MEDIUM 6.8
Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical ac… |
|
CVE-2021-30596
MEDIUM 4.3
Incorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox (URL bar)… |
|
CVE-2021-30594
MEDIUM 6.8
Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to … |
|
CVE-2021-30593
HIGH 8.1
Out of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an… |
|
CVE-2021-30592
HIGH 8.8
Out of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform … |
|
CVE-2021-30591
HIGH 8.8
Use after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-30590
HIGH 8.8
Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-29989
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed evidence of memory corruption and we pres… |
|
CVE-2021-29988
HIGH 8.8
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploita… |
|
CVE-2021-29987
MEDIUM 6.5
After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a different position but still… |
|
CVE-2021-29986
HIGH 8.1
A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash. *Note: This issue only affected Linux operati… |
|
CVE-2021-29985
HIGH 8.8
A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbir… |
|
CVE-2021-29984
HIGH 8.8
Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. This led to me… |
|
CVE-2021-29982
MEDIUM 6.5
Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of memory. Th… |
|
CVE-2021-29981
HIGH 8.8
An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code that would lead to a po… |
|
CVE-2021-29980
HIGH 8.8
Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerabil… |
|
CVE-2021-36958
HIGH 7.8
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfull… |
|
CVE-2021-36948
Windows Update Medic Service Elevation of Privilege Vulnerability |
|
CVE-2021-36947
HIGH 8.8
Windows Print Spooler Remote Code Execution Vulnerability |
|
CVE-2021-36942
Windows LSA Spoofing Vulnerability |
|
CVE-2021-36938
MEDIUM 5.5
Windows Cryptographic Primitives Library Information Disclosure Vulnerability |
|
CVE-2021-36937
HIGH 7.8
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability |
|
CVE-2021-36936
HIGH 8.8
Windows Print Spooler Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.