Vulnerabilities

Tracked app vulnerabilities

1,721 CVEs affect a tracked app or OS (Critical, Windows). 37 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 1,721
Actively exploited: 37
Publication window: 2007-08-28 → 2026-11-10

All CVEs 1,721 CISA KEV 37 Public exploit 44 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

1,721 entries Critical Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2021-1673 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1668 CRITICAL · vendor Windows 2021-01-12 Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1667 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1666 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1665 CRITICAL · vendor Windows 2021-01-12 GDI+ Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1660 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1658 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-21115 CRITICAL 9.6 2021-01-08 User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perf…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21111 CRITICAL 9.6 2021-01-08 Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to p…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21110 CRITICAL 9.6 2021-01-08 Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pa…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21109 CRITICAL 9.6 2021-01-08 Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a …	CRITICAL 9.6	—		2021-01-08
CVE-2021-21108 CRITICAL 9.6 2021-01-08 Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a san…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21107 CRITICAL 9.6 2021-01-08 Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentia…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21106 CRITICAL 9.6 2021-01-08 Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a …	CRITICAL 9.6	—		2021-01-08
CVE-2020-16025 CRITICAL 9.6 2021-01-08 Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perf…	CRITICAL 9.6	—		2021-01-08
CVE-2020-16024 CRITICAL 9.6 2021-01-08 Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a s…	CRITICAL 9.6	—		2021-01-08
CVE-2020-16018 CRITICAL 9.6 2021-01-08 Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a s…	CRITICAL 9.6	—		2021-01-08
CVE-2020-16017 CRITICAL 9.6 2021-01-08 Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perf…	CRITICAL 9.6	—		2021-01-08
CVE-2020-16016 CRITICAL 9.6 2021-01-08 Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially …	CRITICAL 9.6	—		2021-01-08
CVE-2020-16014 CRITICAL 9.6 2021-01-08 Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sand…	CRITICAL 9.6	—		2021-01-08
CVE-2020-17095 CRITICAL · vendor Windows 2020-12-08 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-12-08
CVE-2020-17051 CRITICAL · vendor Windows 2020-11-10 Windows Network File System Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-11-10
CVE-2020-17042 CRITICAL · vendor Windows 2020-11-10 Windows Print Spooler Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-11-10
CVE-2020-16011 CRITICAL 9.6 2020-11-03 Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially…	CRITICAL 9.6	—		2020-11-03
CVE-2020-16010 CRITICAL 9.6 2020-11-03 Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially…	CRITICAL 9.6	—		2020-11-03
CVE-2020-15999 CRITICAL 9.6 KEV Android 2020-11-03 Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…	CRITICAL 9.6	KEV	Android	2020-11-03
CVE-2020-15993 CRITICAL 9.8 2020-11-03 Use after free in printing in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CRITICAL 9.8	—		2020-11-03
CVE-2020-15683 CRITICAL 9.8 2020-10-22 Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory c…	CRITICAL 9.8	—		2020-10-22
CVE-2020-27619 CRITICAL 9.8 2020-10-22 In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.	CRITICAL 9.8	—		2020-10-22
CVE-2020-16968 CRITICAL · vendor Windows 2020-10-13 Windows Camera Codec Pack Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-10-13
CVE-2020-16967 CRITICAL · vendor Windows 2020-10-13 Windows Camera Codec Pack Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-10-13
CVE-2020-16923 CRITICAL · vendor Windows 2020-10-13 Microsoft Graphics Components Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-10-13
CVE-2020-16915 CRITICAL · vendor Windows 2020-10-13 Media Foundation Memory Corruption Vulnerability	CRITICAL · vendor	—	Windows	2020-10-13
CVE-2020-16911 CRITICAL · vendor Windows 2020-10-13 GDI+ Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-10-13
CVE-2020-16898 CRITICAL · vendor Windows 2020-10-13 Windows TCP/IP Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-10-13
CVE-2020-16891 CRITICAL · vendor Windows 2020-10-13 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-10-13
CVE-2020-6573 CRITICAL 9.6 2020-09-21 Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially pe…	CRITICAL 9.6	—		2020-09-21
CVE-2020-15963 CRITICAL 9.6 2020-09-21 Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension…	CRITICAL 9.6	—		2020-09-21
CVE-2020-15961 CRITICAL 9.6 2020-09-21 Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension …	CRITICAL 9.6	—		2020-09-21
CVE-2020-1593 CRITICAL · vendor Windows 2020-09-08 Windows Media Audio Decoder Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-09-08
CVE-2020-1508 CRITICAL · vendor Windows 2020-09-08 Windows Media Audio Decoder Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-09-08
CVE-2020-1319 CRITICAL · vendor Windows 2020-09-08 Microsoft Windows Codecs Library Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-09-08
CVE-2020-1285 CRITICAL · vendor Windows 2020-09-08 GDI+ Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-09-08
CVE-2020-1252 CRITICAL · vendor Windows 2020-09-08 Windows Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-09-08
CVE-2020-1129 CRITICAL · vendor Windows 2020-09-08 Microsoft Windows Codecs Library Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-09-08
CVE-2020-0997 CRITICAL · vendor Windows 2020-09-08 Windows Camera Codec Pack Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-09-08
CVE-2020-0922 CRITICAL · vendor Windows 2020-09-08 Microsoft COM for Windows Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-09-08
CVE-2020-0908 CRITICAL · vendor Windows 2020-09-08 Windows Text Service Module Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-09-08
CVE-2020-1585 CRITICAL · vendor Windows 2020-08-11 Microsoft Windows Codecs Library Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-08-11
CVE-2020-1560 CRITICAL · vendor Windows 2020-08-11 Microsoft Windows Codecs Library Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-08-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM