Vulnerabilities

Tracked app vulnerabilities

28,855 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,855
Actively exploited: 374
Publication window: 1997-01-01 → 2026-11-03

All CVEs 28,855 CISA KEV 374 Public exploit 642 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,855 entries

CVE	Severity	KEV	Apps	Published
CVE-2021-1674 HIGH · vendor Windows 2021-01-12 Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1673 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1672 HIGH · vendor Windows 2021-01-12 Windows Projected File System FS Filter Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1671 HIGH · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1670 HIGH · vendor Windows 2021-01-12 Windows Projected File System FS Filter Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1669 HIGH · vendor Windows 2021-01-12 Windows Remote Desktop Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1668 CRITICAL · vendor Windows 2021-01-12 Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1667 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1666 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1665 CRITICAL · vendor Windows 2021-01-12 GDI+ Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1664 HIGH · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1663 HIGH · vendor Windows 2021-01-12 Windows Projected File System FS Filter Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1662 HIGH · vendor Windows 2021-01-12 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1661 HIGH · vendor Windows 2021-01-12 Windows Installer Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1660 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1659 HIGH · vendor Windows 2021-01-12 Windows CSC Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1658 CRITICAL · vendor Windows 2021-01-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2021-01-12
CVE-2021-1657 HIGH · vendor Windows 2021-01-12 Windows Fax Compose Form Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1656 HIGH · vendor Windows 2021-01-12 TPM Device Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1655 HIGH · vendor Windows 2021-01-12 Windows CSC Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1654 HIGH · vendor Windows 2021-01-12 Windows CSC Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1653 HIGH · vendor Windows 2021-01-12 Windows CSC Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1652 HIGH · vendor Windows 2021-01-12 Windows CSC Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1651 HIGH · vendor Windows 2021-01-12 Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1650 HIGH · vendor Windows 2021-01-12 Windows Runtime C++ Template Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1649 HIGH · vendor Windows 2021-01-12 Active Template Library Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1648 HIGH · vendor Windows 2021-01-12 Microsoft splwow64 Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1646 HIGH · vendor Windows 2021-01-12 Windows WLAN Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1645 HIGH · vendor Windows 2021-01-12 Windows Docker Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1642 HIGH · vendor Windows 2021-01-12 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1638 HIGH · vendor Windows 2021-01-12 Windows Bluetooth Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-1637 HIGH · vendor Windows 2021-01-12 Windows DNS Query Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2021-01-12
CVE-2021-23253 MEDIUM 5.3 Navigateur Web Opera Mini 2021-01-11 Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g.…	MEDIUM 5.3	—	Navigateur Web Opera Mini	2021-01-11
CVE-2021-21116 HIGH 8.8 2021-01-08 Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-01-08
CVE-2021-21115 CRITICAL 9.6 2021-01-08 User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perf…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21114 HIGH 8.8 2021-01-08 Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-01-08
CVE-2021-21113 HIGH 8.8 2021-01-08 Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-01-08
CVE-2021-21112 HIGH 8.8 2021-01-08 Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-01-08
CVE-2021-21111 CRITICAL 9.6 2021-01-08 Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to p…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21110 CRITICAL 9.6 2021-01-08 Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pa…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21109 CRITICAL 9.6 2021-01-08 Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a …	CRITICAL 9.6	—		2021-01-08
CVE-2021-21108 CRITICAL 9.6 2021-01-08 Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a san…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21107 CRITICAL 9.6 2021-01-08 Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentia…	CRITICAL 9.6	—		2021-01-08
CVE-2021-21106 CRITICAL 9.6 2021-01-08 Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a …	CRITICAL 9.6	—		2021-01-08
CVE-2020-16043 HIGH 8.8 2021-01-08 Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicio…	HIGH 8.8	—		2021-01-08
CVE-2020-16042 MEDIUM 6.5 2021-01-08 Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a …	MEDIUM 6.5	—		2021-01-08
CVE-2020-16041 HIGH 8.1 2021-01-08 Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised the renderer process to obtain potentiall…	HIGH 8.1	—		2021-01-08
CVE-2020-16040 MEDIUM 6.5 2021-01-08 Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	MEDIUM 6.5	—		2021-01-08
CVE-2020-16039 HIGH 8.8 2021-01-08 Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-01-08
CVE-2020-16038 HIGH 8.8 2021-01-08 Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2021-01-08

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM