Vulnerabilities

Tracked app vulnerabilities

8,530 entries

All CVEs 16,444 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2022-24546 HIGH 7.8 2022-04-12 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-24545 HIGH 8.1 2022-04-12 Windows Kerberos Remote Code Execution Vulnerability	HIGH 8.1	—	—	—	2022-04-12	Windows Kerberos Remote Code Execution Vulnerability
CVE-2022-24544 HIGH 7.8 2022-04-12 Windows Kerberos Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-24542 HIGH 7.8 2022-04-12 Windows Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-24541 CRITICAL 8.8 2022-04-12 Windows Server Service Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2022-04-12	Windows Server Service Remote Code Execution Vulnerability
CVE-2022-24540 HIGH 7.0 2022-04-12 Windows ALPC Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2022-04-12	Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-24539 HIGH 8.1 2022-04-12 Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability	HIGH 8.1	—	—	—	2022-04-12	Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
CVE-2022-24538 HIGH 6.5 2022-04-12 Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability	HIGH 6.5	—	—	—	2022-04-12	Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
CVE-2022-24537 CRITICAL 7.8 2022-04-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL 7.8	—	—	—	2022-04-12	Windows Hyper-V Remote Code Execution Vulnerability
CVE-2022-24536 HIGH 7.2 2022-04-12 Windows DNS Server Remote Code Execution Vulnerability	HIGH 7.2	—	—	—	2022-04-12	Windows DNS Server Remote Code Execution Vulnerability
CVE-2022-24534 HIGH 7.5 2022-04-12 Win32 Stream Enumeration Remote Code Execution Vulnerability	HIGH 7.5	—	—	—	2022-04-12	Win32 Stream Enumeration Remote Code Execution Vulnerability
CVE-2022-24533 HIGH 8.0 2022-04-12 Remote Desktop Protocol Remote Code Execution Vulnerability	HIGH 8.0	—	—	—	2022-04-12	Remote Desktop Protocol Remote Code Execution Vulnerability
CVE-2022-24530 HIGH 7.8 2022-04-12 Windows Installer Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows Installer Elevation of Privilege Vulnerability
CVE-2022-24528 HIGH 8.8 2022-04-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	HIGH 8.8	—	—	—	2022-04-12	Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-24521 HIGH 7.8 KEV 2022-04-12 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-04-12	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-24500 CRITICAL 8.8 2022-04-12 Windows SMB Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2022-04-12	Windows SMB Remote Code Execution Vulnerability
CVE-2022-24499 HIGH 7.8 2022-04-12 Windows Installer Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows Installer Elevation of Privilege Vulnerability
CVE-2022-24498 HIGH 6.5 2022-04-12 Windows iSCSI Target Service Information Disclosure Vulnerability	HIGH 6.5	—	—	—	2022-04-12	Windows iSCSI Target Service Information Disclosure Vulnerability
CVE-2022-24497 CRITICAL 9.8 2022-04-12 Windows Network File System Remote Code Execution Vulnerability	CRITICAL 9.8	—	—	—	2022-04-12	Windows Network File System Remote Code Execution Vulnerability
CVE-2022-24496 HIGH 7.8 2022-04-12 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
CVE-2022-24495 HIGH 7.0 2022-04-12 Windows Direct Show Remote Code Execution Vulnerability	HIGH 7.0	—	—	—	2022-04-12	Windows Direct Show Remote Code Execution Vulnerability
CVE-2022-24494 HIGH 7.8 2022-04-12 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2022-24493 HIGH 5.5 2022-04-12 Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2022-04-12	Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
CVE-2022-24492 HIGH 8.8 2022-04-12 Remote Procedure Call Runtime Remote Code Execution Vulnerability	HIGH 8.8	—	—	—	2022-04-12	Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-24491 CRITICAL 9.8 2022-04-12 Windows Network File System Remote Code Execution Vulnerability	CRITICAL 9.8	—	—	—	2022-04-12	Windows Network File System Remote Code Execution Vulnerability
CVE-2022-24490 HIGH 8.1 2022-04-12 Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability	HIGH 8.1	—	—	—	2022-04-12	Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
CVE-2022-24489 HIGH 7.8 2022-04-12 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Cluster Client Failover (CCF) Elevation of Privilege Vulnerability
CVE-2022-24488 HIGH 7.8 2022-04-12 Windows Desktop Bridge Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows Desktop Bridge Elevation of Privilege Vulnerability
CVE-2022-24487 HIGH 8.8 2022-04-12 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability	HIGH 8.8	—	—	—	2022-04-12	Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
CVE-2022-24486 HIGH 7.8 2022-04-12 Windows Kerberos Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-24485 HIGH 7.5 2022-04-12 Win32 File Enumeration Remote Code Execution Vulnerability	HIGH 7.5	—	—	—	2022-04-12	Win32 File Enumeration Remote Code Execution Vulnerability
CVE-2022-24484 HIGH 5.5 2022-04-12 Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability	HIGH 5.5	—	—	—	2022-04-12	Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
CVE-2022-24483 HIGH 5.5 2022-04-12 Windows Kernel Information Disclosure Vulnerability	HIGH 5.5	—	—	—	2022-04-12	Windows Kernel Information Disclosure Vulnerability
CVE-2022-24482 HIGH 7.0 2022-04-12 Windows ALPC Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2022-04-12	Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-24481 HIGH 7.8 2022-04-12 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-24479 HIGH 7.8 2022-04-12 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
CVE-2022-24474 HIGH 7.8 2022-04-12 Windows Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-23268 HIGH 6.5 2022-04-12 Windows Hyper-V Denial of Service Vulnerability	HIGH 6.5	—	—	—	2022-04-12	Windows Hyper-V Denial of Service Vulnerability
CVE-2022-23257 CRITICAL 8.8 2022-04-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2022-04-12	Windows Hyper-V Remote Code Execution Vulnerability
CVE-2022-22009 HIGH 7.8 2022-04-12 Windows Hyper-V Remote Code Execution Vulnerability	HIGH 7.8	—	—	—	2022-04-12	Windows Hyper-V Remote Code Execution Vulnerability
CVE-2022-22008 CRITICAL 7.8 2022-04-12 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL 7.8	—	—	—	2022-04-12	Windows Hyper-V Remote Code Execution Vulnerability
CVE-2022-21983 HIGH 7.5 2022-04-12 Win32 Stream Enumeration Remote Code Execution Vulnerability	HIGH 7.5	—	—	—	2022-04-12	Win32 Stream Enumeration Remote Code Execution Vulnerability
CVE-2018-25032 HIGH 7.5 Network 2 apps 2022-03-25 zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.	HIGH 7.5	Network	—	2	2022-03-25	zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVE-2022-26488 HIGH 7.0 Local 2 apps 2022-03-10 In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker t…	HIGH 7.0	Local	—	2	2022-03-10	In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker t…
CVE-2021-3733 MEDIUM 6.5 Network 2 apps 2022-03-10 There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects …	MEDIUM 6.5	Network	—	2	2022-03-10	There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects …
CVE-2022-24525 HIGH 7.0 2022-03-08 Windows Update Stack Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2022-03-08	Windows Update Stack Elevation of Privilege Vulnerability
CVE-2022-24508 HIGH 8.8 2022-03-08 Win32 File Enumeration Remote Code Execution Vulnerability	HIGH 8.8	—	—	—	2022-03-08	Win32 File Enumeration Remote Code Execution Vulnerability
CVE-2022-24507 HIGH 7.8 2022-03-08 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH 7.8	—	—	—	2022-03-08	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2022-24505 HIGH 7.0 2022-03-08 Windows ALPC Elevation of Privilege Vulnerability	HIGH 7.0	—	—	—	2022-03-08	Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-24503 HIGH 5.4 2022-03-08 Remote Desktop Protocol Client Information Disclosure Vulnerability	HIGH 5.4	—	—	—	2022-03-08	Remote Desktop Protocol Client Information Disclosure Vulnerability