Vulnerabilities

Tracked app vulnerabilities

2,721 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 2,721
Actively exploited: 48
Publication window: 2007-08-28 → 2026-11-10

All CVEs 2,721 CISA KEV 48 Public exploit 56 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

2,721 entries Critical Clear all

CVE	Severity	KEV	Apps	Published
CVE-2021-31166 CRITICAL · vendor KEV Windows 2021-05-11 HTTP Protocol Stack Remote Code Execution Vulnerability	CRITICAL · vendor	KEV	Windows	2021-05-11
CVE-2021-28476 CRITICAL · vendor Windows 2021-05-11 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-05-11
CVE-2021-29921 CRITICAL 9.8 2021-05-06 In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attack…	CRITICAL 9.8	—		2021-05-06
CVE-2021-0475 CRITICAL · vendor Android 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-05-01
CVE-2021-0474 CRITICAL · vendor Android 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-05-01
CVE-2021-0473 CRITICAL · vendor Android 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-05-01
CVE-2021-0467 CRITICAL · vendor Android 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-05-01
CVE-2021-21226 CRITICAL 9.6 2021-04-26 Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a…	CRITICAL 9.6	—		2021-04-26
CVE-2021-21223 CRITICAL 9.6 2021-04-26 Integer overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a san…	CRITICAL 9.6	—		2021-04-26
CVE-2021-21201 CRITICAL 9.6 2021-04-26 Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform …	CRITICAL 9.6	—		2021-04-26
CVE-2021-28343 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28339 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28338 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28337 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28336 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28335 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28334 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28333 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28332 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28331 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28330 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28329 CRITICAL · vendor Windows 2021-04-13 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-28315 CRITICAL · vendor Windows 2021-04-13 Windows Media Video Decoder Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-27095 CRITICAL · vendor Windows 2021-04-13 Windows Media Video Decoder Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-04-13
CVE-2021-24026 CRITICAL 9.8 2021-04-06 A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v…	CRITICAL 9.8	—		2021-04-06
CVE-2021-0430 CRITICAL · vendor Android 2021-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-04-01
CVE-2020-11210 CRITICAL · vendor Android 2021-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-04-01
CVE-2021-26897 CRITICAL 9.8 Windows 2021-03-11 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-03-11
CVE-2021-26895 CRITICAL 9.8 Windows 2021-03-11 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-03-11
CVE-2021-26894 CRITICAL 9.8 Windows 2021-03-11 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-03-11
CVE-2021-26893 CRITICAL 9.8 Windows 2021-03-11 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-03-11
CVE-2021-26877 CRITICAL 9.8 Windows 2021-03-11 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 9.8	—	Windows	2021-03-11
CVE-2021-26867 CRITICAL 9.9 Windows 2021-03-11 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL 9.9	—	Windows	2021-03-11
CVE-2021-21300 CRITICAL · vendor 2021-03-09 Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as f…	CRITICAL · vendor	—		2021-03-09
CVE-2021-0397 CRITICAL · vendor Android 2021-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-03-01
CVE-2020-11228 CRITICAL · vendor Android 2021-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-03-01
CVE-2020-11227 CRITICAL · vendor Android 2021-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-03-01
CVE-2020-11218 CRITICAL · vendor Android 2021-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-03-01
CVE-2020-11204 CRITICAL · vendor Android 2021-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-03-01
CVE-2020-11192 CRITICAL · vendor Android 2021-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2021-03-01
CVE-2021-21155 CRITICAL 9.6 2021-02-22 Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to pote…	CRITICAL 9.6	—		2021-02-22
CVE-2021-21154 CRITICAL 9.6 2021-02-22 Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially per…	CRITICAL 9.6	—		2021-02-22
CVE-2021-21151 CRITICAL 9.6 2021-02-22 Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.	CRITICAL 9.6	—		2021-02-22
CVE-2021-21150 CRITICAL 9.6 2021-02-22 Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentiall…	CRITICAL 9.6	—		2021-02-22
CVE-2021-21146 CRITICAL 9.6 2021-02-09 Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21142 CRITICAL 9.6 2021-02-09 Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-21132 CRITICAL 9.6 2021-02-09 Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21124 CRITICAL 9.6 2021-02-09 Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox esc…	CRITICAL 9.6	—		2021-02-09
CVE-2021-21121 CRITICAL 9.6 2021-02-09 Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML …	CRITICAL 9.6	—		2021-02-09
CVE-2021-24094 CRITICAL · vendor Windows 2021-02-09 Windows TCP/IP Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-02-09

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM