Vulnerabilities
Tracked app vulnerabilities
19,858 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,858
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-27
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-28435
HIGH · vendor
Windows Event Tracing Information Disclosure Vulnerability |
|
CVE-2021-28434
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28358
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28357
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28356
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28355
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28354
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28353
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28352
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28351
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2021-28350
HIGH · vendor
Windows GDI+ Remote Code Execution Vulnerability |
|
CVE-2021-28349
HIGH · vendor
Windows GDI+ Remote Code Execution Vulnerability |
|
CVE-2021-28348
HIGH · vendor
Windows GDI+ Remote Code Execution Vulnerability |
|
CVE-2021-28347
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2021-28346
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28345
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28344
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28343
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28342
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28341
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28340
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28339
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28338
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28337
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28336
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28335
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28334
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28333
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28332
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28331
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28330
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28329
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28328
HIGH · vendor
Windows DNS Information Disclosure Vulnerability |
|
CVE-2021-28327
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28326
HIGH · vendor
Windows AppX Deployment Server Denial of Service Vulnerability |
|
CVE-2021-28325
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-28324
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-28323
HIGH · vendor
Windows DNS Information Disclosure Vulnerability |
|
CVE-2021-28322
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28321
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28320
HIGH · vendor
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
|
CVE-2021-28319
HIGH · vendor
Windows TCP/IP Driver Denial of Service Vulnerability |
|
CVE-2021-28318
HIGH · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2021-28317
HIGH · vendor
Microsoft Windows Codecs Library Information Disclosure Vulnerability |
|
CVE-2021-28316
HIGH · vendor
Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability |
|
CVE-2021-28315
CRITICAL · vendor
Windows Media Video Decoder Remote Code Execution Vulnerability |
|
CVE-2021-28314
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2021-28313
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28312
MEDIUM · vendor
Windows NTFS Denial of Service Vulnerability |
|
CVE-2021-28311
HIGH · vendor
Windows Application Compatibility Cache Denial of Service Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.