Vulnerabilities
Tracked app vulnerabilities
28,627 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,627
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-38654
Microsoft Office Visio Remote Code Execution Vulnerability |
|
CVE-2021-38653
Microsoft Office Visio Remote Code Execution Vulnerability |
|
CVE-2021-38650
Microsoft Office Spoofing Vulnerability |
|
CVE-2021-38646
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
|
CVE-2021-38639
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-38638
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2021-38637
MEDIUM 5.5
Windows Storage Information Disclosure Vulnerability |
|
CVE-2021-38636
MEDIUM 5.5
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability |
|
CVE-2021-38635
MEDIUM 5.5
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability |
|
CVE-2021-38634
HIGH 7.1
Microsoft Windows Update Client Elevation of Privilege Vulnerability |
|
CVE-2021-38633
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2021-38632
MEDIUM 5.7
Windows BitLocker Security Feature Bypass Vulnerability |
|
CVE-2021-38630
HIGH 7.8
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-38629
MEDIUM 6.5
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability |
|
CVE-2021-38628
HIGH 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2021-38624
MEDIUM 6.5
Windows Key Storage Provider Security Feature Bypass Vulnerability |
|
CVE-2021-36975
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-36974
HIGH 7.8
Windows SMB Elevation of Privilege Vulnerability |
|
CVE-2021-36973
HIGH 7.8
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability |
|
CVE-2021-36972
MEDIUM 5.5
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-36969
MEDIUM 5.5
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability |
|
CVE-2021-36967
HIGH 8.0
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability |
|
CVE-2021-36966
HIGH 7.8
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2021-36965
HIGH 8.8
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability |
|
CVE-2021-36964
HIGH 7.8
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-36963
HIGH 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2021-36962
MEDIUM 5.5
Windows Installer Information Disclosure Vulnerability |
|
CVE-2021-36961
MEDIUM 5.5
Windows Installer Denial of Service Vulnerability |
|
CVE-2021-36960
HIGH 7.5
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-36959
MEDIUM 5.5
Windows Authenticode Spoofing Vulnerability |
|
CVE-2021-36955
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2021-36954
HIGH 8.8
Windows Bind Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2021-26435
HIGH 8.1
Windows Scripting Engine Memory Corruption Vulnerability |
|
CVE-2021-40529
MEDIUM 5.9
The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between tw… |
|
CVE-2021-30624
HIGH 8.8
Chromium: CVE-2021-30624 Use after free in Autofill |
|
CVE-2021-30623
HIGH 8.8
Chromium: CVE-2021-30623 Use after free in Bookmarks |
|
CVE-2021-30622
HIGH 8.8
Chromium: CVE-2021-30622 Use after free in WebApp Installs |
|
CVE-2021-30621
MEDIUM 6.5
Chromium: CVE-2021-30621 UI Spoofing in Autofill |
|
CVE-2021-30620
HIGH 8.8
Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink |
|
CVE-2021-30619
MEDIUM 6.5
Chromium: CVE-2021-30619 UI Spoofing in Autofill |
|
CVE-2021-30618
HIGH 8.8
Chromium: CVE-2021-30618 Inappropriate implementation in DevTools |
|
CVE-2021-30617
MEDIUM 6.5
Chromium: CVE-2021-30617 Policy bypass in Blink |
|
CVE-2021-30616
HIGH 8.8
Chromium: CVE-2021-30616 Use after free in Media |
|
CVE-2021-30615
MEDIUM 6.5
Chromium: CVE-2021-30615 Cross-origin data leak in Navigation |
|
CVE-2021-30614
HIGH 8.8
Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip |
|
CVE-2021-30613
HIGH 8.8
Chromium: CVE-2021-30613 Use after free in Base internals |
|
CVE-2021-30612
HIGH 8.8
Chromium: CVE-2021-30612 Use after free in WebRTC |
|
CVE-2021-30611
HIGH 8.8
Chromium: CVE-2021-30611 Use after free in WebRTC |
|
CVE-2021-30610
HIGH 8.8
Chromium: CVE-2021-30610 Use after free in Extensions API |
|
CVE-2021-30609
HIGH 8.8
Chromium: CVE-2021-30609 Use after free in Sign-In |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.