Vulnerabilities
Tracked app vulnerabilities
404 CVEs affect a tracked app or OS (High, all platforms). 294 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 404
- Actively exploited
- 294
- Publication window
- 2009-10-13 → 2026-05-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-0832
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0826
HIGH · vendor
Windows Storage Services Elevation of Privilege Vulnerability |
|
CVE-2018-0823
HIGH · vendor
Named Pipe File System Elevation of Privilege Vulnerability |
|
CVE-2018-0822
HIGH · vendor
Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability |
|
CVE-2018-0821
HIGH · vendor
Windows AppContainer Elevation Of Privilege Vulnerability |
|
CVE-2018-0752
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0751
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0749
HIGH · vendor
SMB Server Elevation of Privilege Vulnerability |
|
CVE-2018-0748
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0746
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0745
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0744
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-0743
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2018-0777
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… |
|
CVE-2018-0776
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… |
|
CVE-2018-0775
HIGH 7.5
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje… |
|
CVE-2018-0774
HIGH 7.5
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje… |
|
CVE-2018-0770
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… |
|
CVE-2018-0769
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… |
|
CVE-2018-0758
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… |
|
CVE-2017-13216
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13209
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-11918
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the curren… |
|
CVE-2017-11914
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user… |
|
CVE-2017-11911
HIGH 7.5
ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due … |
|
CVE-2017-11909
HIGH 7.5
ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due … |
|
CVE-2017-11893
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the … |
|
CVE-2017-11885
HIGH · vendor
Windows RRAS Service Remote Code Execution Vulnerability |
|
CVE-2017-7533
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13156
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-11873
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same us… |
|
CVE-2017-11870
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, d… |
|
CVE-2017-11861
HIGH 7.5
Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the curr… |
|
CVE-2017-11841
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s… |
|
CVE-2017-11840
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s… |
|
CVE-2017-11839
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affect… |
|
CVE-2017-11831
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-11830
HIGH · vendor
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2017-11811
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
|
CVE-2017-11809
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
|
CVE-2017-11802
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
|
CVE-2017-11799
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte… |
|
CVE-2017-11823
HIGH · vendor
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability |
|
CVE-2017-11785
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-1000117
HIGH 8.8
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on … |
|
CVE-2017-14496
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-8755
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use… |
|
CVE-2017-8751
HIGH 7.5
Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge ac… |
|
CVE-2017-8740
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft … |
|
CVE-2017-8734
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.