Vulnerabilities
Tracked app vulnerabilities
28,626 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,626
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-3043
HIGH 8.8
Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specifi… |
|
CVE-2022-3042
HIGH 8.8
Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted … |
|
CVE-2022-3041
HIGH 8.8
Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-3040
HIGH 8.8
Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-3039
HIGH 8.8
Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-3038
HIGH 8.8
KEV
Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2022-2998
HIGH 8.8
Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI inter… |
|
CVE-2022-2861
MEDIUM 6.5
Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extensi… |
|
CVE-2022-2860
MEDIUM 6.5
Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass cookie prefix restrictions via a crafte… |
|
CVE-2022-2859
HIGH 8.8
Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions… |
|
CVE-2022-2858
HIGH 8.8
Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI intera… |
|
CVE-2022-2857
HIGH 8.8
Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2856
MEDIUM 6.5
KEV
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a … |
|
CVE-2022-2855
HIGH 8.8
Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2854
HIGH 8.8
Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-2853
HIGH 8.8
Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to pot… |
|
CVE-2022-2852
HIGH 8.8
Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2022-27492
HIGH 7.8
An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file. |
|
CVE-2022-36934
CRITICAL 9.8
An integer overflow in WhatsApp could result in remote code execution in an established video call. |
|
CVE-2022-41222
HIGH 7.0
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move. |
|
CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2022-38006
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-38005
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-38004
HIGH · vendor
Windows Fax Service Remote Code Execution Vulnerability |
|
CVE-2022-37959
HIGH · vendor
Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability |
|
CVE-2022-37958
CRITICAL · vendor
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
|
CVE-2022-37957
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37956
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-37955
HIGH · vendor
Windows Group Policy Elevation of Privilege Vulnerability |
|
CVE-2022-37954
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-35841
HIGH · vendor
Windows Enterprise App Management Service Remote Code Execution Vulnerability |
|
CVE-2022-35840
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35838
HIGH · vendor
HTTP V3 Denial of Service Vulnerability |
|
CVE-2022-35837
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-35836
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35835
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35834
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-35833
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-35832
HIGH · vendor
Windows Event Tracing Denial of Service Vulnerability |
|
CVE-2022-35831
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2022-35830
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2022-35803
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2022-34734
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34733
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-34732
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34731
HIGH · vendor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
|
CVE-2022-34730
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
|
CVE-2022-34729
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2022-34728
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-34727
HIGH · vendor
Microsoft ODBC Driver Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.