Vulnerabilities

Tracked app vulnerabilities

28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,627
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-30

All CVEs 28,627 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,627 entries

CVE	Severity	KEV	Apps	Published
CVE-2022-21888 HIGH · vendor Windows 2022-01-11 Windows Modern Execution Server Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21887 HIGH · vendor Windows 2022-01-11 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21885 HIGH · vendor Windows 2022-01-11 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21884 HIGH · vendor Windows 2022-01-11 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21883 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21881 HIGH · vendor Windows 2022-01-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21880 HIGH · vendor Windows 2022-01-11 Windows GDI+ Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21879 HIGH · vendor Windows 2022-01-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21878 HIGH · vendor Windows 2022-01-11 Windows Geolocation Service Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21877 HIGH · vendor Windows 2022-01-11 Storage Spaces Controller Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21876 HIGH · vendor Windows 2022-01-11 Win32k Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21875 HIGH · vendor Windows 2022-01-11 Windows Storage Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21874 HIGH · vendor Windows 2022-01-11 Windows Security Center API Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21873 HIGH · vendor Windows 2022-01-11 Tile Data Repository Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21872 HIGH · vendor Windows 2022-01-11 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21871 HIGH · vendor Windows 2022-01-11 Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21870 HIGH · vendor Windows 2022-01-11 Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21869 HIGH · vendor Windows 2022-01-11 Clipboard User Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21868 HIGH · vendor Windows 2022-01-11 Windows Devices Human Interface Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21867 HIGH · vendor Windows 2022-01-11 Windows Push Notifications Apps Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21866 HIGH · vendor Windows 2022-01-11 Windows System Launcher Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21865 HIGH · vendor Windows 2022-01-11 Connected Devices Platform Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21864 HIGH · vendor Windows 2022-01-11 Windows UI Immersive Server API Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21863 HIGH · vendor Windows 2022-01-11 Windows StateRepository API Server file Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21862 HIGH · vendor Windows 2022-01-11 Windows Application Model Core API Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21861 HIGH · vendor Windows 2022-01-11 Task Flow Data Engine Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21860 HIGH · vendor Windows 2022-01-11 Windows AppContracts API Server Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21859 HIGH · vendor Windows 2022-01-11 Windows Accounts Control Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21858 HIGH · vendor Windows 2022-01-11 Windows Bind Filter Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21857 CRITICAL · vendor Windows 2022-01-11 Active Directory Domain Services Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2022-21852 HIGH · vendor Windows 2022-01-11 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21851 HIGH · vendor Windows 2022-01-11 Remote Desktop Client Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21850 HIGH · vendor Windows 2022-01-11 Remote Desktop Client Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21849 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21848 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21847 HIGH · vendor Windows 2022-01-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21843 HIGH · vendor Windows 2022-01-11 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21839 HIGH · vendor Windows 2022-01-11 Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21838 HIGH · vendor Windows 2022-01-11 Windows Cleanup Manager Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21836 HIGH · vendor Windows 2022-01-11 Windows Certificate Spoofing Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21835 HIGH · vendor Windows 2022-01-11 Microsoft Cryptographic Services Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21834 HIGH · vendor Windows 2022-01-11 Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-21833 CRITICAL · vendor Windows 2022-01-11 Virtual Machine IDE Drive Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2022-01-11
CVE-2021-36976 HIGH · vendor Windows 2022-01-11 Libarchive Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2022-01-11
CVE-2022-22822 CRITICAL 9.8 Android 2022-01-10 addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.	CRITICAL 9.8	—	Android	2022-01-10
CVE-2021-24042 CRITICAL 9.8 2022-01-04 The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Bu…	CRITICAL 9.8	—		2022-01-04
CVE-2021-40148 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39659 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39634 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01
CVE-2021-39633 HIGH · vendor Android 2022-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2022-01-01

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM