Vulnerabilities

Tracked app vulnerabilities

562 CVEs affect a tracked app or OS (all severities, Windows). 302 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 562
Actively exploited: 302
Publication window: 1999-11-11 → 2026-04-14

All CVEs 18,015 CISA KEV 302 Public exploit 562 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

562 entries Windows Public exploit Clear all

CVE	Severity	KEV	Apps	Published
CVE-2004-0501 N/A 2004-08-18 Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message co…	N/A	—		2004-08-18
CVE-2004-0648 N/A 2004-08-06 Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the …	N/A	—		2004-08-06
CVE-2004-0526 N/A 2004-08-06 Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values…	N/A	—		2004-08-06
CVE-2004-0204 N/A 2004-08-06 Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .N…	N/A	—		2004-08-06
CVE-2004-0121 N/A 2004-04-15 Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OU…	N/A	—		2004-04-15
CVE-2003-1378 N/A 2003-12-31 Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML …	N/A	—		2003-12-31
CVE-2002-1143 N/A 2003-04-11 Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returne…	N/A	—		2003-04-11
CVE-2001-0538 N/A Office 2001-08-14 Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail …	N/A	—	Office	2001-08-14
CVE-2001-1088 N/A 2001-06-05 Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not …	N/A	—		2001-06-05
CVE-2001-0322 N/A 2001-06-02 MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that…	N/A	—		2001-06-02
CVE-2000-0567 N/A 2000-07-18 Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka th…	N/A	—		2000-07-18
CVE-2000-0329 N/A 1999-11-11 A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Act…	N/A	—		1999-11-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM