Vulnerabilities

Tracked app vulnerabilities

1,721 CVEs affect a tracked app or OS (Critical, Windows). 37 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 1,721
Actively exploited: 37
Publication window: 2007-08-28 → 2026-11-10

All CVEs 1,721 CISA KEV 37 Public exploit 44 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

1,721 entries Critical Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2021-33742 CRITICAL · vendor KEV Windows 2021-06-08 Windows MSHTML Platform Remote Code Execution Vulnerability	CRITICAL · vendor	KEV	Windows	2021-06-08
CVE-2021-31959 CRITICAL · vendor Windows 2021-06-08 Scripting Engine Memory Corruption Vulnerability	CRITICAL · vendor	—	Windows	2021-06-08
CVE-2021-31194 CRITICAL · vendor Windows 2021-05-11 OLE Automation Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-05-11
CVE-2021-31166 CRITICAL · vendor KEV Windows 2021-05-11 HTTP Protocol Stack Remote Code Execution Vulnerability	CRITICAL · vendor	KEV	Windows	2021-05-11
CVE-2021-28476 CRITICAL · vendor Windows 2021-05-11 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-05-11
CVE-2021-29921 CRITICAL 9.8 2021-05-06 In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attack…	CRITICAL 9.8	—		2021-05-06
CVE-2021-21226 CRITICAL 9.6 2021-04-26 Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a…	CRITICAL 9.6	—		2021-04-26
CVE-2021-21223 CRITICAL 9.6 2021-04-26 Integer overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a san…	CRITICAL 9.6	—		2021-04-26
CVE-2021-21201 CRITICAL 9.6 2021-04-26 Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform …	CRITICAL 9.6	—		2021-04-26
CVE-2021-28343 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28339 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28338 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28337 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28336 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28335 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28334 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28333 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28332 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28331 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28330 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28329 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28315 CRITICAL · vendor Windows 2021-04-13 Windows Media Video Decoder Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-27095 CRITICAL · vendor Windows 2021-04-13 Windows Media Video Decoder Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-26897 CRITICAL 9.8 Windows 2021-03-11 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-03-11
CVE-2021-26895 CRITICAL 9.8 Windows 2021-03-11 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-03-11
CVE-2021-26894 CRITICAL 9.8 Windows 2021-03-11 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-03-11
CVE-2021-26893 CRITICAL 9.8 Windows 2021-03-11 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-03-11
CVE-2021-26877 CRITICAL 9.8 Windows 2021-03-11 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-03-11
CVE-2021-26867 CRITICAL 9.9 Windows 2021-03-11 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL 9.9	—	Windows	2021-03-11
CVE-2021-21300 CRITICAL · vendor 2021-03-09 Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as f…	CRITICAL · vendor	—		2021-03-09
CVE-2021-21155 CRITICAL 9.6 2021-02-22 Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to pote…	CRITICAL 9.6	—		2021-02-22
CVE-2021-21154 CRITICAL 9.6 2021-02-22 Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially per…	CRITICAL 9.6	—		2021-02-22
CVE-2021-21151 CRITICAL 9.6 2021-02-22 Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.	CRITICAL 9.6	—		2021-02-22
CVE-2021-21150 CRITICAL 9.6 2021-02-22 Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentiall…	CRITICAL 9.6	—		2021-02-22
CVE-2021-21146 CRITICAL 9.6 2021-02-09 Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21142 CRITICAL 9.6 2021-02-09 Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21132 CRITICAL 9.6 2021-02-09 Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21124 CRITICAL 9.6 2021-02-09 Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox esc…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21121 CRITICAL 9.6 2021-02-09 Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-24094 CRITICAL · vendor Windows 2021-02-09 Windows TCP/IP Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24093 CRITICAL · vendor Windows 2021-02-09 Windows Graphics Component Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24091 CRITICAL · vendor Windows 2021-02-09 Windows Camera Codec Pack Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24088 CRITICAL · vendor Windows 2021-02-09 Windows Local Spooler Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24081 CRITICAL · vendor Windows 2021-02-09 Microsoft Windows Codecs Library Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24078 CRITICAL · vendor Windows 2021-02-09 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24077 CRITICAL · vendor Windows 2021-02-09 Windows Fax Service Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24074 CRITICAL · vendor Windows 2021-02-09 Windows TCP/IP Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-1722 CRITICAL · vendor Windows 2021-02-09 Windows Fax Service Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-3177 CRITICAL 9.8 2021-01-19 Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications tha…	CRITICAL 9.8	—		2021-01-19
CVE-2020-16045 CRITICAL 9.6 2021-01-14 Use after Free in Payments in Google Chrome on Android prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially …	CRITICAL 9.6	—		2021-01-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM