Vulnerabilities
Tracked app vulnerabilities
28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,627
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-35108
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-1050
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-43680
HIGH 7.5
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situati… |
|
CVE-2022-37454
CRITICAL 9.8
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary … |
|
CVE-2022-39260
HIGH 8.5
Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull fun… |
|
CVE-2022-39253
HIGH · vendor
Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are … |
|
CVE-2022-42721
MEDIUM 5.5
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inj… |
|
CVE-2022-42720
HIGH 7.8
Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers… |
|
CVE-2022-41674
HIGH 8.1
An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update… |
|
CVE-2022-42719
HIGH 8.8
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (abl… |
|
CVE-2022-20422
HIGH 7.0
In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of priv… |
|
CVE-2022-20421
HIGH 7.8
In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege wit… |
|
CVE-2022-41081
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-41033
Windows COM+ Event System Service Elevation of Privilege Vulnerability |
|
CVE-2022-38051
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2022-38050
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-38047
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-38046
HIGH · vendor
Web Account Manager Information Disclosure Vulnerability |
|
CVE-2022-38045
HIGH · vendor
Windows Server Service Elevation of Privilege Vulnerability |
|
CVE-2022-38044
HIGH · vendor
Windows CD-ROM File System Driver Remote Code Execution Vulnerability |
|
CVE-2022-38043
HIGH · vendor
Windows Security Support Provider Interface Information Disclosure Vulnerability |
|
CVE-2022-38042
HIGH · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2022-38041
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-38040
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-38039
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38038
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38037
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38036
HIGH · vendor
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
|
CVE-2022-38034
HIGH · vendor
Windows Workstation Service Elevation of Privilege Vulnerability |
|
CVE-2022-38033
HIGH · vendor
Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability |
|
CVE-2022-38032
HIGH · vendor
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability |
|
CVE-2022-38031
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-38030
HIGH · vendor
Windows USB Serial Driver Information Disclosure Vulnerability |
|
CVE-2022-38029
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-38028
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-38027
HIGH · vendor
Windows Storage Elevation of Privilege Vulnerability |
|
CVE-2022-38026
HIGH · vendor
Windows DHCP Client Information Disclosure Vulnerability |
|
CVE-2022-38025
HIGH · vendor
Windows Distributed File System (DFS) Information Disclosure Vulnerability |
|
CVE-2022-38022
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-38021
HIGH · vendor
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
|
CVE-2022-38016
HIGH · vendor
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
|
CVE-2022-38003
HIGH · vendor
Windows Resilient File System Elevation of Privilege |
|
CVE-2022-38000
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-37999
HIGH · vendor
Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
|
CVE-2022-37998
HIGH · vendor
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2022-37997
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2022-37996
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2022-37995
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37994
HIGH · vendor
Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
|
CVE-2022-37993
HIGH · vendor
Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.