Vulnerabilities

Tracked app vulnerabilities

19,910 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,910
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-27

All CVEs 19,910 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,910 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2021-21143 HIGH 8.8 2021-02-09 Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potenti…	HIGH 8.8	—		2021-02-09
CVE-2021-21142 CRITICAL 9.6 2021-02-09 Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21141 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a craft…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21140 MEDIUM 6.8 2021-02-09 Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB devic…	MEDIUM 6.8	—		2021-02-09
CVE-2021-21139 MEDIUM 6.5 2021-02-09 Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21138 HIGH 8.6 2021-02-09 Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file.	HIGH 8.6	—		2021-02-09
CVE-2021-21137 MEDIUM 6.5 2021-02-09 Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21136 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted …	MEDIUM 6.5	—		2021-02-09
CVE-2021-21135 MEDIUM 6.5 2021-02-09 Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML p…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21134 MEDIUM 6.5 2021-02-09 Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.	MEDIUM 6.5	—		2021-02-09
CVE-2021-21133 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass naviga…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21132 CRITICAL 9.6 2021-02-09 Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21131 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21130 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21129 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21128 HIGH 8.8 2021-02-09 Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-02-09
CVE-2021-21127 HIGH 8.8 2021-02-09 Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted …	HIGH 8.8	—		2021-02-09
CVE-2021-21126 MEDIUM 6.5 2021-02-09 Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Ex…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21125 HIGH 8.1 2021-02-09 Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restriction…	HIGH 8.1	—		2021-02-09
CVE-2021-21124 CRITICAL 9.6 2021-02-09 Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox esc…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21123 MEDIUM 6.5 2021-02-09 Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafte…	MEDIUM 6.5	—		2021-02-09
CVE-2021-21122 HIGH 8.8 2021-02-09 Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-02-09
CVE-2021-21121 CRITICAL 9.6 2021-02-09 Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21120 HIGH 8.8 2021-02-09 Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-02-09
CVE-2021-21119 HIGH 8.8 2021-02-09 Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c…	HIGH 8.8	—		2021-02-09
CVE-2021-21118 HIGH 8.8 2021-02-09 Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a cr…	HIGH 8.8	—		2021-02-09
CVE-2021-21117 HIGH 7.8 2021-02-09 Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a cr…	HIGH 7.8	—		2021-02-09
CVE-2020-16044 HIGH 8.8 2021-02-09 Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.	HIGH 8.8	—		2021-02-09
CVE-2021-25195 HIGH · vendor Windows 2021-02-09 Windows PKU2U Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24106 HIGH · vendor Windows 2021-02-09 Windows DirectX Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24103 HIGH · vendor Windows 2021-02-09 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24102 HIGH · vendor Windows 2021-02-09 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24098 HIGH · vendor Windows 2021-02-09 Windows Console Driver Denial of Service Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24096 HIGH · vendor Windows 2021-02-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24094 CRITICAL · vendor Windows 2021-02-09 Windows TCP/IP Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24093 CRITICAL · vendor Windows 2021-02-09 Windows Graphics Component Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24091 CRITICAL · vendor Windows 2021-02-09 Windows Camera Codec Pack Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24088 CRITICAL · vendor Windows 2021-02-09 Windows Local Spooler Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24086 HIGH · vendor Windows 2021-02-09 Windows TCP/IP Denial of Service Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24084 HIGH · vendor Windows 2021-02-09 Windows Mobile Device Management Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24083 HIGH · vendor Windows 2021-02-09 Windows Address Book Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24082 HIGH · vendor Windows 2021-02-09 Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24081 CRITICAL · vendor Windows 2021-02-09 Microsoft Windows Codecs Library Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24080 MEDIUM · vendor Windows 2021-02-09 Windows Trust Verification API Denial of Service Vulnerability	MEDIUM · vendor	—	Windows	2021-02-09
CVE-2021-24079 HIGH · vendor Windows 2021-02-09 Windows Backup Engine Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24078 CRITICAL · vendor Windows 2021-02-09 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24077 CRITICAL · vendor Windows 2021-02-09 Windows Fax Service Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09
CVE-2021-24076 HIGH · vendor Windows 2021-02-09 Microsoft Windows VMSwitch Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24075 HIGH · vendor Windows 2021-02-09 Microsoft Windows VMSwitch Denial of Service Vulnerability	HIGH · vendor	—	Windows	2021-02-09
CVE-2021-24074 CRITICAL · vendor Windows 2021-02-09 Windows TCP/IP Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM