Vulnerabilities
Tracked app vulnerabilities
28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,627
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-38019
MEDIUM 6.5
Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
|
CVE-2021-38018
MEDIUM 6.5
Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
|
CVE-2021-38017
HIGH 8.8
Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a craf… |
|
CVE-2021-38016
HIGH 8.8
Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted… |
|
CVE-2021-38015
HIGH 8.8
Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypas… |
|
CVE-2021-38014
HIGH 8.8
Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2021-38013
CRITICAL 9.6
Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI render… |
|
CVE-2021-38012
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-38011
HIGH 8.8
Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
|
CVE-2021-38010
MEDIUM 6.5
Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had compromised the renderer process to by… |
|
CVE-2021-38009
MEDIUM 6.5
Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
|
CVE-2021-38008
HIGH 8.8
Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-38007
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-38006
HIGH 8.8
Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
|
CVE-2021-38005
HIGH 8.8
Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-43256
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2021-43226
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2021-43893
HIGH · vendor
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability |
|
CVE-2021-43883
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2021-43880
HIGH · vendor
Windows Mobile Device Management Elevation of Privilege Vulnerability |
|
CVE-2021-43248
HIGH · vendor
Windows Digital Media Receiver Elevation of Privilege Vulnerability |
|
CVE-2021-43247
HIGH · vendor
Windows TCP/IP Driver Elevation of Privilege Vulnerability |
|
CVE-2021-43246
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-43244
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2021-43240
HIGH · vendor
NTFS Set Short Name Elevation of Privilege Vulnerability |
|
CVE-2021-43239
HIGH · vendor
Windows Recovery Environment Agent Elevation of Privilege Vulnerability |
|
CVE-2021-43238
HIGH · vendor
Windows Remote Access Elevation of Privilege Vulnerability |
|
CVE-2021-43237
HIGH · vendor
Windows Setup Elevation of Privilege Vulnerability |
|
CVE-2021-43236
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2021-43235
HIGH · vendor
Storage Spaces Controller Information Disclosure Vulnerability |
|
CVE-2021-43234
HIGH · vendor
Windows Fax Service Remote Code Execution Vulnerability |
|
CVE-2021-43233
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2021-43232
HIGH · vendor
Windows Event Tracing Remote Code Execution Vulnerability |
|
CVE-2021-43231
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-43230
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-43229
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-43228
HIGH · vendor
SymCrypt Denial of Service Vulnerability |
|
CVE-2021-43227
HIGH · vendor
Storage Spaces Controller Information Disclosure Vulnerability |
|
CVE-2021-43224
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2021-43223
HIGH · vendor
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
|
CVE-2021-43222
HIGH · vendor
Microsoft Message Queuing Information Disclosure Vulnerability |
|
CVE-2021-43219
HIGH · vendor
DirectX Graphics Kernel File Denial of Service Vulnerability |
|
CVE-2021-43217
CRITICAL · vendor
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability |
|
CVE-2021-43216
HIGH · vendor
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability |
|
CVE-2021-43215
CRITICAL · vendor
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution |
|
CVE-2021-43207
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2021-41333
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2021-44228
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameter… |
|
CVE-2021-43546
MEDIUM 4.3
It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefo… |
|
CVE-2021-43545
MEDIUM 6.5
Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0,… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.