Vulnerabilities

Tracked app vulnerabilities

28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,627
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-30

All CVEs 28,627 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,627 entries

CVE	Severity	KEV	Apps	Published
CVE-2021-30322 HIGH · vendor Android 2022-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-02-01
CVE-2021-30318 HIGH · vendor Android 2022-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-02-01
CVE-2021-30317 CRITICAL · vendor Android 2022-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL · vendor	—	Android	2022-02-01
CVE-2021-30309 HIGH · vendor Android 2022-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-02-01
CVE-2021-0706 HIGH · vendor Android 2022-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-02-01
CVE-2020-13113 HIGH · vendor Android 2022-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-02-01
CVE-2020-13112 HIGH · vendor Android 2022-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-02-01
CVE-2022-23990 HIGH 7.5 Android 2022-01-26 Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.	HIGH 7.5	—	Android	2022-01-26
CVE-2022-23852 CRITICAL 9.8 Android 2022-01-24 Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.	CRITICAL 9.8	—	Android	2022-01-24
CVE-2022-21882 HIGH 7.0 KEV Windows 2022-01-11 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	KEV	Windows	2022-01-11
CVE-2022-21842 HIGH 7.8 2022-01-11 Microsoft Word Remote Code Execution Vulnerability	HIGH 7.8	—		2022-01-11
CVE-2022-21840 HIGH 8.8 2022-01-11 Microsoft Office Remote Code Execution Vulnerability	HIGH 8.8	—		2022-01-11
CVE-2022-21964 HIGH · vendor Windows 2022-01-11 Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21963 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21962 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21961 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21960 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21959 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21958 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21928 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21924 HIGH · vendor Windows 2022-01-11 Workstation Service Remote Protocol Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21922 HIGH · vendor Windows 2022-01-11 Remote Procedure Call Runtime Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21921 HIGH · vendor Windows 2022-01-11 Windows Defender Credential Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21920 HIGH · vendor Windows 2022-01-11 Windows Kerberos Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21919 HIGH · vendor KEV Windows 2022-01-11 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2022-01-11
CVE-2022-21918 HIGH · vendor Windows 2022-01-11 DirectX Graphics Kernel File Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21916 HIGH · vendor Windows 2022-01-11 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21915 HIGH · vendor Windows 2022-01-11 Windows GDI+ Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21914 HIGH · vendor Windows 2022-01-11 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21913 HIGH · vendor Windows 2022-01-11 Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21912 CRITICAL · vendor Windows 2022-01-11 DirectX Graphics Kernel Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21910 HIGH · vendor Windows 2022-01-11 Microsoft Cluster Port Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21908 HIGH · vendor Windows 2022-01-11 Windows Installer Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21907 CRITICAL · vendor Windows 2022-01-11 HTTP Protocol Stack Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21906 HIGH · vendor Windows 2022-01-11 Windows Defender Application Control Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21905 HIGH · vendor Windows 2022-01-11 Windows Hyper-V Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21904 HIGH · vendor Windows 2022-01-11 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21903 HIGH · vendor Windows 2022-01-11 Windows GDI Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21902 HIGH · vendor Windows 2022-01-11 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21901 HIGH · vendor Windows 2022-01-11 Windows Hyper-V Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21900 HIGH · vendor Windows 2022-01-11 Windows Hyper-V Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21898 CRITICAL · vendor Windows 2022-01-11 DirectX Graphics Kernel Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21897 HIGH · vendor Windows 2022-01-11 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21896 HIGH · vendor Windows 2022-01-11 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21895 HIGH · vendor Windows 2022-01-11 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21894 HIGH · vendor Windows 2022-01-11 Secure Boot Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21893 HIGH · vendor Windows 2022-01-11 Remote Desktop Protocol Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21892 HIGH · vendor Windows 2022-01-11 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21890 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21889 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM