Vulnerabilities
Tracked app vulnerabilities
28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,627
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-29104
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-29103
HIGH · vendor
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2022-29102
HIGH · vendor
Windows Failover Cluster Information Disclosure Vulnerability |
|
CVE-2022-26940
HIGH · vendor
Remote Desktop Protocol Client Information Disclosure Vulnerability |
|
CVE-2022-26939
HIGH · vendor
Storage Spaces Direct Elevation of Privilege Vulnerability |
|
CVE-2022-26938
HIGH · vendor
Storage Spaces Direct Elevation of Privilege Vulnerability |
|
CVE-2022-26937
CRITICAL · vendor
Windows Network File System Remote Code Execution Vulnerability |
|
CVE-2022-26936
HIGH · vendor
Windows Server Service Information Disclosure Vulnerability |
|
CVE-2022-26935
HIGH · vendor
Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
|
CVE-2022-26934
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-26933
HIGH · vendor
Windows NTFS Information Disclosure Vulnerability |
|
CVE-2022-26932
HIGH · vendor
Storage Spaces Direct Elevation of Privilege Vulnerability |
|
CVE-2022-26931
CRITICAL · vendor
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2022-26930
HIGH · vendor
Windows Remote Access Connection Manager Information Disclosure Vulnerability |
|
CVE-2022-26927
HIGH · vendor
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2022-26925
Windows LSA Spoofing Vulnerability |
|
CVE-2022-26923
Active Directory Domain Services Elevation of Privilege Vulnerability |
|
CVE-2022-26913
HIGH · vendor
Windows Authentication Information Disclosure Vulnerability |
|
CVE-2022-24466
HIGH · vendor
Windows Hyper-V Security Feature Bypass Vulnerability |
|
CVE-2022-23279
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2022-23270
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-22713
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2022-22019
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2022-22017
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2022-22016
HIGH · vendor
Windows PlayToManager Elevation of Privilege Vulnerability |
|
CVE-2022-22015
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
|
CVE-2022-22014
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-22013
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-22012
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-22011
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-21972
CRITICAL · vendor
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
|
CVE-2022-29868
MEDIUM 5.5
1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass. Malicious software running on the same computer can exfiltrate… |
|
CVE-2022-22072
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-22068
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-22065
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-22064
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-22057
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20116
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20115
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20114
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20113
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20112
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20110
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20109
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20084
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20011
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20010
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20009
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20008
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20007
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.