Vulnerabilities
Tracked app vulnerabilities
28,630 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 28,630
- Actively exploited
- 374
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2021-28328
HIGH · vendor
Windows DNS Information Disclosure Vulnerability |
|
CVE-2021-28327
HIGH · vendor
Remote Procedure Call Runtime Remote Code Execution Vulnerability |
|
CVE-2021-28326
HIGH · vendor
Windows AppX Deployment Server Denial of Service Vulnerability |
|
CVE-2021-28325
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-28324
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2021-28323
HIGH · vendor
Windows DNS Information Disclosure Vulnerability |
|
CVE-2021-28322
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28321
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28320
HIGH · vendor
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
|
CVE-2021-28319
HIGH · vendor
Windows TCP/IP Driver Denial of Service Vulnerability |
|
CVE-2021-28318
HIGH · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2021-28317
HIGH · vendor
Microsoft Windows Codecs Library Information Disclosure Vulnerability |
|
CVE-2021-28316
HIGH · vendor
Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability |
|
CVE-2021-28315
CRITICAL · vendor
Windows Media Video Decoder Remote Code Execution Vulnerability |
|
CVE-2021-28314
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2021-28313
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2021-28312
MEDIUM · vendor
Windows NTFS Denial of Service Vulnerability |
|
CVE-2021-28311
HIGH · vendor
Windows Application Compatibility Cache Denial of Service Vulnerability |
|
CVE-2021-28310
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-28309
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2021-27096
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2021-27095
CRITICAL · vendor
Windows Media Video Decoder Remote Code Execution Vulnerability |
|
CVE-2021-27094
HIGH · vendor
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability |
|
CVE-2021-27093
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2021-27092
HIGH · vendor
Azure AD Web Sign-in Security Feature Bypass Vulnerability |
|
CVE-2021-27090
HIGH · vendor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
|
CVE-2021-27089
HIGH · vendor
Microsoft Internet Messaging API Remote Code Execution Vulnerability |
|
CVE-2021-27088
HIGH · vendor
Windows Event Tracing Elevation of Privilege Vulnerability |
|
CVE-2021-27086
HIGH · vendor
Windows Services and Controller App Elevation of Privilege Vulnerability |
|
CVE-2021-27079
HIGH · vendor
Windows Media Photo Codec Information Disclosure Vulnerability |
|
CVE-2021-27072
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2021-26417
HIGH · vendor
Windows Overlay Filter Information Disclosure Vulnerability |
|
CVE-2021-26416
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2021-26415
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2021-26413
HIGH · vendor
Windows Installer Spoofing Vulnerability |
|
CVE-2021-21199
HIGH 8.8
Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially explo… |
|
CVE-2021-21198
HIGH 7.4
Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
|
CVE-2021-21197
HIGH 8.8
Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2021-21196
HIGH 8.8
Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a craf… |
|
CVE-2021-21195
HIGH 8.8
Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2021-21194
HIGH 8.8
Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2021-1467
MEDIUM 4.3
A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is d… |
|
CVE-2021-24027
HIGH 7.5
A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to… |
|
CVE-2021-24026
CRITICAL 9.8
A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v… |
|
CVE-2021-1800
MEDIUM 5.5
A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files … |
|
CVE-2021-0471
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-0468
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-0446
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-0445
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2021-0444
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.