Vulnerabilities
Tracked app vulnerabilities
19,851 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,851
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-27
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-30517
Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30516
Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially explo… |
|
CVE-2021-30515
Use after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30514
Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
|
CVE-2021-30513
Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30512
Use after free in Notifications in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially explo… |
|
CVE-2021-30511
Out of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform a… |
|
CVE-2021-30510
Use after free in Aura in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-30509
Out of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform a… |
|
CVE-2021-30508
Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to po… |
|
CVE-2021-30507
Inappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process t… |
|
CVE-2021-30506
Incorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212 allowed an attacker who convinced a user to install a web applicat… |
|
CVE-2021-3426
There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server co… |
|
CVE-2020-26144
MEDIUM 6.5
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the fi… |
|
CVE-2021-31180
Microsoft Office Graphics Remote Code Execution Vulnerability |
|
CVE-2021-31179
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2021-31178
Microsoft Office Information Disclosure Vulnerability |
|
CVE-2021-31177
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2021-31175
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2021-31174
Microsoft Excel Information Disclosure Vulnerability |
|
CVE-2021-31208
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2021-31205
HIGH · vendor
Windows SMB Client Security Feature Bypass Vulnerability |
|
CVE-2021-31194
CRITICAL · vendor
OLE Automation Remote Code Execution Vulnerability |
|
CVE-2021-31193
HIGH · vendor
Windows SSDP Service Elevation of Privilege Vulnerability |
|
CVE-2021-31192
HIGH · vendor
Windows Media Foundation Core Remote Code Execution Vulnerability |
|
CVE-2021-31191
HIGH · vendor
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability |
|
CVE-2021-31190
HIGH · vendor
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2021-31188
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2021-31187
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2021-31186
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
|
CVE-2021-31185
HIGH · vendor
Windows Desktop Bridge Denial of Service Vulnerability |
|
CVE-2021-31184
HIGH · vendor
Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability |
|
CVE-2021-31182
HIGH · vendor
Microsoft Bluetooth Driver Spoofing Vulnerability |
|
CVE-2021-31170
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2021-31169
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2021-31168
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2021-31167
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2021-31166
HTTP Protocol Stack Remote Code Execution Vulnerability |
|
CVE-2021-31165
HIGH · vendor
Windows Container Manager Service Elevation of Privilege Vulnerability |
|
CVE-2021-28479
HIGH · vendor
Windows CSC Service Information Disclosure Vulnerability |
|
CVE-2021-28476
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2021-28455
HIGH · vendor
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability |
|
CVE-2020-24588
Windows Wireless Networking Spoofing Vulnerability |
|
CVE-2020-24587
Windows Wireless Networking Information Disclosure Vulnerability |
|
CVE-2021-29921
In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attack… |
|
CVE-2021-21233
Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted … |
|
CVE-2021-21232
Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21231
Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-21230
Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21229
Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML pa… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.