Vulnerabilities

Tracked app vulnerabilities

19,858 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,858
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-27

All CVEs 19,858 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,858 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2021-26891 HIGH 7.8 Windows 2021-03-11 Windows Container Execution Agent Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26890 HIGH 7.8 Windows 2021-03-11 Application Virtualization Remote Code Execution Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26889 HIGH 7.8 Windows 2021-03-11 Windows Update Stack Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26887 HIGH 7.8 Windows 2021-03-11 An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file ser…	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26886 MEDIUM 6.1 Windows 2021-03-11 User Profile Service Denial of Service Vulnerability	MEDIUM 6.1	—	Windows	2021-03-11
CVE-2021-26885 HIGH 7.8 Windows 2021-03-11 Windows WalletService Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26884 MEDIUM 5.5 Windows 2021-03-11 Windows Media Photo Codec Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2021-03-11
CVE-2021-26882 HIGH 7.8 Windows 2021-03-11 Remote Access API Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26881 HIGH 7.5 Windows 2021-03-11 Microsoft Windows Media Foundation Remote Code Execution Vulnerability	HIGH 7.5	—	Windows	2021-03-11
CVE-2021-26880 HIGH 7.8 Windows 2021-03-11 Windows Storage Spaces Controller Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26879 HIGH 7.5 Windows 2021-03-11 Windows Network Address Translation (NAT) Denial of Service Vulnerability	HIGH 7.5	—	Windows	2021-03-11
CVE-2021-26878 HIGH 7.8 Windows 2021-03-11 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26877 CRITICAL 9.8 Windows 2021-03-11 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-03-11
CVE-2021-26876 HIGH 8.8 Windows 2021-03-11 OpenType Font Parsing Remote Code Execution Vulnerability	HIGH 8.8	—	Windows	2021-03-11
CVE-2021-26875 HIGH 7.8 Windows 2021-03-11 Windows Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26874 HIGH 7.8 Windows 2021-03-11 Windows Overlay Filter Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26873 HIGH 7.0 Windows 2021-03-11 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.0	—	Windows	2021-03-11
CVE-2021-26872 HIGH 7.8 Windows 2021-03-11 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26871 HIGH 7.8 Windows 2021-03-11 Windows WalletService Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26870 HIGH 7.8 Windows 2021-03-11 Windows Projected File System Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26869 MEDIUM 5.5 Windows 2021-03-11 Windows ActiveX Installer Service Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2021-03-11
CVE-2021-26868 HIGH 7.8 Windows 2021-03-11 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26867 CRITICAL 9.9 Windows 2021-03-11 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL 9.9	—	Windows	2021-03-11
CVE-2021-26866 HIGH 7.1 Windows 2021-03-11 Windows Update Service Elevation of Privilege Vulnerability	HIGH 7.1	—	Windows	2021-03-11
CVE-2021-26865 HIGH 8.8 Windows 2021-03-11 Windows Container Execution Agent Elevation of Privilege Vulnerability	HIGH 8.8	—	Windows	2021-03-11
CVE-2021-26864 HIGH 8.4 Windows 2021-03-11 Windows Virtual Registry Provider Elevation of Privilege Vulnerability	HIGH 8.4	—	Windows	2021-03-11
CVE-2021-26863 HIGH 7.0 Windows 2021-03-11 Windows Win32k Elevation of Privilege Vulnerability	HIGH 7.0	—	Windows	2021-03-11
CVE-2021-26862 HIGH 7.0 Windows 2021-03-11 Windows Installer Elevation of Privilege Vulnerability	HIGH 7.0	—	Windows	2021-03-11
CVE-2021-26861 HIGH 7.8 Windows 2021-03-11 Windows Graphics Component Remote Code Execution Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26860 HIGH 7.8 Windows 2021-03-11 Windows App-V Overlay Filter Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-26411 HIGH 8.8 KEV Microsoft Edge 2021-03-11 Internet Explorer Memory Corruption Vulnerability	HIGH 8.8	KEV	Microsoft Edge	2021-03-11
CVE-2021-24108 HIGH 7.8 2021-03-11 Microsoft Office Remote Code Execution Vulnerability	HIGH 7.8	—		2021-03-11
CVE-2021-24107 MEDIUM 5.5 Windows 2021-03-11 Windows Event Tracing Information Disclosure Vulnerability	MEDIUM 5.5	—	Windows	2021-03-11
CVE-2021-24095 HIGH 7.0 Windows 2021-03-11 DirectX Elevation of Privilege Vulnerability	HIGH 7.0	—	Windows	2021-03-11
CVE-2021-24090 HIGH 7.8 Windows 2021-03-11 Windows Error Reporting Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-1729 HIGH 7.1 Windows 2021-03-11 Windows Update Stack Setup Elevation of Privilege Vulnerability	HIGH 7.1	—	Windows	2021-03-11
CVE-2021-1640 HIGH 7.8 Windows 2021-03-11 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	Windows	2021-03-11
CVE-2021-21300 CRITICAL · vendor 2021-03-09 Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as f…	CRITICAL · vendor	—		2021-03-09
CVE-2021-21190 HIGH 8.8 2021-03-09 Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory v…	HIGH 8.8	—		2021-03-09
CVE-2021-21189 MEDIUM 4.3 2021-03-09 Insufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HT…	MEDIUM 4.3	—		2021-03-09
CVE-2021-21188 HIGH 8.8 2021-03-09 Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-03-09
CVE-2021-21187 MEDIUM 4.3 2021-03-09 Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs v…	MEDIUM 4.3	—		2021-03-09
CVE-2021-21186 MEDIUM 4.3 2021-03-09 Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to by…	MEDIUM 4.3	—		2021-03-09
CVE-2021-21185 MEDIUM 4.3 2021-03-09 Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension …	MEDIUM 4.3	—		2021-03-09
CVE-2021-21184 MEDIUM 4.3 2021-03-09 Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML …	MEDIUM 4.3	—		2021-03-09
CVE-2021-21183 MEDIUM 4.3 2021-03-09 Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML …	MEDIUM 4.3	—		2021-03-09
CVE-2021-21182 MEDIUM 6.5 2021-03-09 Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to byp…	MEDIUM 6.5	—		2021-03-09
CVE-2021-21181 MEDIUM 6.5 2021-03-09 Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from …	MEDIUM 6.5	—		2021-03-09
CVE-2021-21180 HIGH 8.8 2021-03-09 Use after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-03-09
CVE-2021-21179 HIGH 8.8 2021-03-09 Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a craf…	HIGH 8.8	—		2021-03-09

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM