Vulnerabilities
Tracked app vulnerabilities
19,858 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,858
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-27
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-28310
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-28309
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2021-27096
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-27095
CRITICAL · vendor
Windows Media Video Decoder Remote Code Execution Vulnerability |
|
CVE-2021-27094
HIGH · vendor
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability |
|
CVE-2021-27093
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2021-27092
HIGH · vendor
Azure AD Web Sign-in Security Feature Bypass Vulnerability |
|
CVE-2021-27090
HIGH · vendor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2021-27089
HIGH · vendor
Microsoft Internet Messaging API Remote Code Execution Vulnerability |
|
CVE-2021-27088
HIGH · vendor
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-27086
HIGH · vendor
Windows Services and Controller App Elevation of Privilege Vulnerability |
|
CVE-2021-27079
HIGH · vendor
Windows Media Photo Codec Information Disclosure Vulnerability |
|
CVE-2021-27072
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-26417
HIGH · vendor
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2021-26416
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-26415
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2021-26413
HIGH · vendor
Windows Installer Spoofing Vulnerability |
|
CVE-2021-21199
HIGH 8.8
Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially explo… |
|
CVE-2021-21198
HIGH 7.4
Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
|
CVE-2021-21197
HIGH 8.8
Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2021-21196
HIGH 8.8
Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a craf… |
|
CVE-2021-21195
HIGH 8.8
Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21194
HIGH 8.8
Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2021-23987
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory c… |
|
CVE-2021-23984
MEDIUM 6.5
A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, … |
|
CVE-2021-23982
MEDIUM 6.5
Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on … |
|
CVE-2021-23981
HIGH 8.1
A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a… |
|
CVE-2020-7463
MEDIUM 5.5
In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handli… |
|
CVE-2021-21193
HIGH 8.8
KEV
Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21192
HIGH 8.8
Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-21191
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-27077
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-27070
HIGH 7.3
Windows 10 Update Assistant Elevation of Privilege Vulnerability |
|
CVE-2021-27063
HIGH 7.5
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2021-27059
HIGH 7.6
KEV
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2021-27057
HIGH 7.8
Microsoft Office Remote Code Execution Vulnerability |
|
CVE-2021-27056
HIGH 7.8
Microsoft PowerPoint Remote Code Execution Vulnerability |
|
CVE-2021-27055
HIGH 7.0
Microsoft Visio Security Feature Bypass Vulnerability |
|
CVE-2021-27054
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-27053
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-26901
HIGH 7.8
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-26900
HIGH 7.8
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-26899
HIGH 7.8
Windows UPnP Device Host Elevation of Privilege Vulnerability |
|
CVE-2021-26898
HIGH 7.8
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-26897
CRITICAL 9.8
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2021-26896
HIGH 7.5
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2021-26895
CRITICAL 9.8
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2021-26894
CRITICAL 9.8
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2021-26893
CRITICAL 9.8
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2021-26892
MEDIUM 6.2
Windows Extensible Firmware Interface Security Feature Bypass Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.