Vulnerabilities
Tracked app vulnerabilities
28,626 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,626
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-37990
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37989
HIGH · vendor
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
|
CVE-2022-37988
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37987
HIGH · vendor
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
|
CVE-2022-37986
HIGH · vendor
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-37985
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-37984
HIGH · vendor
Windows WLAN Service Elevation of Privilege Vulnerability |
|
CVE-2022-37983
HIGH · vendor
Microsoft DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2022-37982
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-37981
HIGH · vendor
Windows Event Logging Service Denial of Service Vulnerability |
|
CVE-2022-37980
HIGH · vendor
Windows DHCP Client Elevation of Privilege Vulnerability |
|
CVE-2022-37979
CRITICAL · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2022-37978
HIGH · vendor
Windows Active Directory Certificate Services Security Feature Bypass |
|
CVE-2022-37977
HIGH · vendor
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
|
CVE-2022-37976
CRITICAL · vendor
Active Directory Certificate Services Elevation of Privilege Vulnerability |
|
CVE-2022-37975
HIGH · vendor
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2022-37974
HIGH · vendor
Windows Mixed Reality Developer Tools Information Disclosure Vulnerability |
|
CVE-2022-37973
HIGH · vendor
Windows Local Session Manager (LSM) Denial of Service Vulnerability |
|
CVE-2022-37970
HIGH · vendor
Windows DWM Core Library Elevation of Privilege Vulnerability |
|
CVE-2022-37965
HIGH · vendor
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
|
CVE-2022-35770
HIGH · vendor
Windows NTLM Spoofing Vulnerability |
|
CVE-2022-34689
CRITICAL · vendor
Windows CryptoAPI Spoofing Vulnerability |
|
CVE-2022-33645
HIGH · vendor
Windows TCP/IP Driver Denial of Service Vulnerability |
|
CVE-2022-33635
HIGH · vendor
Windows GDI+ Remote Code Execution Vulnerability |
|
CVE-2022-33634
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-30198
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-24504
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-22035
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-42703
MEDIUM 5.5
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse. |
|
CVE-2022-33217
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-33214
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-26472
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-26471
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-25749
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-25748
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-25736
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-25723
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-25720
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-25718
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-25687
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-25661
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-25660
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-22077
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20440
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20439
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20438
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20437
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20436
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20435
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20434
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.