Vulnerabilities
Tracked app vulnerabilities
28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,627
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2022-20005
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-20004
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-39700
MEDIUM · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-39670
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-39662
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35116
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35096
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35094
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35090
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35087
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35086
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35080
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35078
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35076
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35073
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-35072
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2022-29582
HIGH 7.0
In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who h… |
|
CVE-2022-27406
HIGH 7.5
FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size. |
|
CVE-2022-27405
HIGH 7.5
FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request. |
|
CVE-2022-29072
HIGH 7.8
7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area. This … |
|
CVE-2022-26903
HIGH 7.8
Windows Graphics Component Remote Code Execution Vulnerability |
|
CVE-2022-26901
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2022-26826
HIGH 7.2
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26795
HIGH 7.8
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2022-24545
HIGH 8.1
Windows Kerberos Remote Code Execution Vulnerability |
|
CVE-2022-24486
HIGH 7.8
Windows Kerberos Elevation of Privilege Vulnerability |
|
CVE-2015-20107
HIGH 7.6
In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow att… |
|
CVE-2022-24765
HIGH · vendor
Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties … |
|
CVE-2022-26920
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2022-26919
CRITICAL · vendor
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
|
CVE-2022-26918
HIGH · vendor
Windows Fax Compose Form Remote Code Execution Vulnerability |
|
CVE-2022-26917
HIGH · vendor
Windows Fax Compose Form Remote Code Execution Vulnerability |
|
CVE-2022-26916
HIGH · vendor
Windows Fax Compose Form Remote Code Execution Vulnerability |
|
CVE-2022-26915
HIGH · vendor
Windows Secure Channel Denial of Service Vulnerability |
|
CVE-2022-26914
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2022-26904
Windows User Profile Service Elevation of Privilege Vulnerability |
|
CVE-2022-26831
HIGH · vendor
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
|
CVE-2022-26830
HIGH · vendor
DiskUsage.exe Remote Code Execution Vulnerability |
|
CVE-2022-26829
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26828
HIGH · vendor
Windows Bluetooth Driver Elevation of Privilege Vulnerability |
|
CVE-2022-26827
HIGH · vendor
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2022-26825
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26824
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26823
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26822
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26821
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26820
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26819
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26818
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2022-26817
HIGH · vendor
Windows DNS Server Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.