Vulnerabilities
Tracked app vulnerabilities
2,721 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 2,721
- Actively exploited
- 48
- Publication window
- 2007-08-28 → 2026-11-10
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-20127
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-26937
CRITICAL · vendor
Windows Network File System Remote Code Execution Vulnerability |
|
CVE-2022-26923
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2022-23270
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-22017
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2022-21972
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2021-35090
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-26919
CRITICAL · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-26809
CRITICAL · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2022-24541
CRITICAL · vendor
Windows Server Service Remote Code Execution Vulnerability |
|
CVE-2022-24537
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2022-24500
CRITICAL · vendor
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2022-24497
CRITICAL · vendor
Windows Network File System Remote Code Execution Vulnerability |
|
CVE-2022-24491
CRITICAL · vendor
Windows Network File System Remote Code Execution Vulnerability |
|
CVE-2022-23257
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2022-22008
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2022-0790
CRITICAL 9.6
Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to poten… |
|
CVE-2022-0466
CRITICAL 9.6
Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious exte… |
|
CVE-2022-0452
CRITICAL 9.6
Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag… |
|
CVE-2021-35123
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35112
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35104
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35081
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-30347
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-30343
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-30342
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-30341
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-30339
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-39708
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35110
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-1942
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-0290
CRITICAL 9.6
Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pa… |
|
CVE-2022-0097
CRITICAL 9.6
Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to… |
|
CVE-2021-24043
CRITICAL 9.1
A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.… |
|
CVE-2021-39675
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-30317
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-23852
CRITICAL 9.8
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES. |
|
CVE-2022-21912
CRITICAL · vendor
DirectX Graphics Kernel Remote Code Execution Vulnerability |
|
CVE-2022-21907
CRITICAL · vendor
HTTP Protocol Stack Remote Code Execution Vulnerability |
|
CVE-2022-21898
CRITICAL · vendor
DirectX Graphics Kernel Remote Code Execution Vulnerability |
|
CVE-2022-21857
CRITICAL · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2022-21833
CRITICAL · vendor
Virtual Machine IDE Drive Elevation of Privilege Vulnerability |
|
CVE-2022-22822
CRITICAL 9.8
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. |
|
CVE-2021-24042
CRITICAL 9.8
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Bu… |
|
CVE-2021-30285
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-38013
CRITICAL 9.6
Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI render… |
|
CVE-2021-43233
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2021-43217
CRITICAL · vendor
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability |
|
CVE-2021-43215
CRITICAL · vendor
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution |
|
CVE-2021-44228
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameter… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.