Vulnerabilities
Tracked app vulnerabilities
393 CVEs affect a tracked app or OS (all severities, all platforms). 286 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 393
- Actively exploited
- 286
- Publication window
- 2004-08-06 → 2026-05-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-0009
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1458
HIGH 7.8
KEV
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
|
CVE-2019-1476
HIGH 7.8
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1405
HIGH 7.8
KEV
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP… |
|
CVE-2019-1347
HIGH 5.7
Windows Denial of Service Vulnerability |
|
CVE-2019-1346
HIGH 5.7
Windows Denial of Service Vulnerability |
|
CVE-2019-1345
HIGH 5.5
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1344
HIGH 5.5
Windows Code Integrity Module Information Disclosure Vulnerability |
|
CVE-2019-1343
HIGH 6.5
Windows Denial of Service Vulnerability |
|
CVE-2019-1322
HIGH 7.0
KEV
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-11932
HIGH 8.8
1 app
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android… |
|
CVE-2019-2215
HIGH
KEV
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1253
HIGH 7.8
KEV
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1245
HIGH 6.5
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1244
HIGH 6.5
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1215
HIGH 7.8
KEV
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-10529
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-5715
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1184
HIGH 6.7
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1170
HIGH 7.9
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2019-1153
HIGH 5.5
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2019-1152
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1151
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1150
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1149
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1148
HIGH 5.5
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2019-1145
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1144
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1125
HIGH 5.6
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-9816
MEDIUM 5.9
1 app
A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security ch… |
|
CVE-2019-11708
CRITICAL 10.0
KEV
1 app
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op… |
|
CVE-2019-11707
HIGH 8.8
KEV
1 app
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware… |
|
CVE-2019-11706
HIGH 7.5
1 app
A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when processing certain email messages, resulti… |
|
CVE-2019-11705
CRITICAL 9.8
1 app
A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when processing certain email messages, resulting in … |
|
CVE-2019-11704
CRITICAL 9.8
1 app
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when processing certain email messages, resulting… |
|
CVE-2019-11703
CRITICAL 9.8
1 app
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in parser_get_next_char when processing certain email messages, resulting in a pot… |
|
CVE-2019-1128
HIGH 7.8
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1127
HIGH 7.8
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1124
HIGH 7.8
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1123
HIGH 7.8
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1122
HIGH 7.8
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1121
HIGH 7.8
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1120
HIGH 7.8
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1119
HIGH 7.8
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1118
HIGH 7.8
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1117
HIGH 7.8
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1089
HIGH 7.8
Windows RPCSS Elevation of Privilege Vulnerability |
|
CVE-2019-2107
CRITICAL
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1019
HIGH 8.5
Microsoft Windows Security Feature Bypass Vulnerability |
|
CVE-2019-0959
HIGH 7.0
Windows Common Log File System Driver Elevation of Privilege Vulnerability |