Vulnerabilities
Tracked app vulnerabilities
28,626 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,626
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-35764
HIGH · vendor
Storage Spaces Direct Elevation of Privilege Vulnerability |
|
CVE-2022-35763
HIGH · vendor
Storage Spaces Direct Elevation of Privilege Vulnerability |
|
CVE-2022-35762
HIGH · vendor
Storage Spaces Direct Elevation of Privilege Vulnerability |
|
CVE-2022-35761
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-35760
HIGH · vendor
Microsoft ATA Port Driver Elevation of Privilege Vulnerability |
|
CVE-2022-35759
HIGH · vendor
Windows Local Security Authority (LSA) Denial of Service Vulnerability |
|
CVE-2022-35758
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2022-35757
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2022-35756
HIGH · vendor
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2022-35755
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-35754
HIGH · vendor
Unified Write Filter Elevation of Privilege Vulnerability |
|
CVE-2022-35753
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2022-35752
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2022-35751
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2022-35750
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-35749
HIGH · vendor
Windows Digital Media Receiver Elevation of Privilege Vulnerability |
|
CVE-2022-35748
HIGH · vendor
HTTP.sys Denial of Service Vulnerability |
|
CVE-2022-35747
HIGH · vendor
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability |
|
CVE-2022-35746
HIGH · vendor
Windows Digital Media Receiver Elevation of Privilege Vulnerability |
|
CVE-2022-35745
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2022-35744
CRITICAL · vendor
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability |
|
CVE-2022-35743
HIGH · vendor
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
|
CVE-2022-34715
HIGH · vendor
Windows Network File System Remote Code Execution Vulnerability |
|
CVE-2022-34714
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2022-34713
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
|
CVE-2022-34712
HIGH · vendor
Windows Defender Credential Guard Information Disclosure Vulnerability |
|
CVE-2022-34711
HIGH · vendor
Windows Defender Credential Guard Elevation of Privilege Vulnerability |
|
CVE-2022-34710
HIGH · vendor
Windows Defender Credential Guard Information Disclosure Vulnerability |
|
CVE-2022-34709
HIGH · vendor
Windows Defender Credential Guard Security Feature Bypass Vulnerability |
|
CVE-2022-34708
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2022-34707
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2022-34706
HIGH · vendor
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
|
CVE-2022-34705
HIGH · vendor
Windows Defender Credential Guard Elevation of Privilege Vulnerability |
|
CVE-2022-34704
HIGH · vendor
Windows Defender Credential Guard Information Disclosure Vulnerability |
|
CVE-2022-34703
HIGH · vendor
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2022-34702
CRITICAL · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
|
CVE-2022-34701
HIGH · vendor
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
|
CVE-2022-34699
HIGH · vendor
Windows Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-34696
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2022-34691
CRITICAL · vendor
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2022-34690
HIGH · vendor
Windows Fax Service Elevation of Privilege Vulnerability |
|
CVE-2022-34303
HIGH · vendor
CERT/CC: CVE-20220-34303 Crypto Pro Boot Loader Bypass |
|
CVE-2022-34302
HIGH · vendor
CERT/CC: CVE-2022-34302 New Horizon Data Systems Inc Boot Loader Bypass |
|
CVE-2022-34301
HIGH · vendor
CERT/CC: CVE-2022-34301 Eurosoft Boot Loader Bypass |
|
CVE-2022-33670
HIGH · vendor
Windows Partition Management Driver Elevation of Privilege Vulnerability |
|
CVE-2022-30197
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2022-30194
HIGH · vendor
Windows WebBrowser Control Remote Code Execution Vulnerability |
|
CVE-2022-30144
HIGH · vendor
Windows Bluetooth Service Remote Code Execution Vulnerability |
|
CVE-2022-30133
CRITICAL · vendor
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability |
|
CVE-2022-36835
LOW 3.3
Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.