Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,851 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,851
Actively exploited
303
Publication window
1997-01-01 → 2026-10-27

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,851 entries Windows Clear all
CVE
CVE-2021-30517
HIGH 8.8

Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-30516
HIGH 8.8

Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially explo…

CVE-2021-30515
HIGH 8.8

Use after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-30514
HIGH 8.8

Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit he…

CVE-2021-30513
HIGH 8.8

Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-30512
HIGH 8.8

Use after free in Notifications in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially explo…

CVE-2021-30511
HIGH 8.1

Out of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform a…

CVE-2021-30510
HIGH 8.8

Use after free in Aura in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-30509
HIGH 8.8

Out of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform a…

CVE-2021-30508
HIGH 8.8

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to po…

CVE-2021-30507
HIGH 8.8

Inappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process t…

CVE-2021-30506
HIGH 8.8

Incorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212 allowed an attacker who convinced a user to install a web applicat…

CVE-2021-3426
MEDIUM 5.7

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server co…

CVE-2020-26144
MEDIUM 6.5

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the fi…

CVE-2021-31180
HIGH 7.8

Microsoft Office Graphics Remote Code Execution Vulnerability

CVE-2021-31179
HIGH 7.8

Microsoft Office Remote Code Execution Vulnerability

CVE-2021-31178
MEDIUM 5.5

Microsoft Office Information Disclosure Vulnerability

CVE-2021-31177
HIGH 7.8

Microsoft Office Remote Code Execution Vulnerability

CVE-2021-31175
HIGH 7.8

Microsoft Office Remote Code Execution Vulnerability

CVE-2021-31174
MEDIUM 5.5

Microsoft Excel Information Disclosure Vulnerability

CVE-2021-31208
HIGH · vendor

Windows Container Manager Service Elevation of Privilege Vulnerability

CVE-2021-31205
HIGH · vendor

Windows SMB Client Security Feature Bypass Vulnerability

CVE-2021-31194
CRITICAL · vendor

OLE Automation Remote Code Execution Vulnerability

CVE-2021-31193
HIGH · vendor

Windows SSDP Service Elevation of Privilege Vulnerability

CVE-2021-31192
HIGH · vendor

Windows Media Foundation Core Remote Code Execution Vulnerability

CVE-2021-31191
HIGH · vendor

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

CVE-2021-31190
HIGH · vendor

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

CVE-2021-31188
HIGH · vendor

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2021-31187
HIGH · vendor

Windows WalletService Elevation of Privilege Vulnerability

CVE-2021-31186
HIGH · vendor

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVE-2021-31185
HIGH · vendor

Windows Desktop Bridge Denial of Service Vulnerability

CVE-2021-31184
HIGH · vendor

Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability

CVE-2021-31182
HIGH · vendor

Microsoft Bluetooth Driver Spoofing Vulnerability

CVE-2021-31170
HIGH · vendor

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2021-31169
HIGH · vendor

Windows Container Manager Service Elevation of Privilege Vulnerability

CVE-2021-31168
HIGH · vendor

Windows Container Manager Service Elevation of Privilege Vulnerability

CVE-2021-31167
HIGH · vendor

Windows Container Manager Service Elevation of Privilege Vulnerability

CVE-2021-31166
CRITICAL · vendor KEV

HTTP Protocol Stack Remote Code Execution Vulnerability

CVE-2021-31165
HIGH · vendor

Windows Container Manager Service Elevation of Privilege Vulnerability

CVE-2021-28479
HIGH · vendor

Windows CSC Service Information Disclosure Vulnerability

CVE-2021-28476
CRITICAL · vendor

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2021-28455
HIGH · vendor

Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability

CVE-2020-24588
HIGH · vendor

Windows Wireless Networking Spoofing Vulnerability

CVE-2020-24587
HIGH · vendor

Windows Wireless Networking Information Disclosure Vulnerability

CVE-2021-29921
CRITICAL 9.8

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attack…

CVE-2021-21233
HIGH 8.8

Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted …

CVE-2021-21232
HIGH 8.8

Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-21231
HIGH 8.8

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

CVE-2021-21230
HIGH 8.8

Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-21229
MEDIUM 6.5

Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML pa…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM