Vulnerabilities
Tracked app vulnerabilities
639 CVEs affect a tracked app or OS (all severities, all platforms). 373 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 639
- Actively exploited
- 373
- Publication window
- 1999-11-11 → 2026-05-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability |
|
CVE-2020-6519
MEDIUM 6.5
Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page. |
|
CVE-2020-6507
HIGH 8.8
Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-0796
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S… |
|
CVE-2019-17026
HIGH 8.8
KEV
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild a… |
|
CVE-2020-6418
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2014-4650
CRITICAL 9.8
The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attacke… |
|
CVE-2020-0683
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2019-11599
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-18426
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and l… |
|
CVE-2020-0610
CRITICAL · vendor
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
|
CVE-2020-0609
CRITICAL · vendor
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
|
CVE-2020-0601
Windows CryptoAPI Spoofing Vulnerability |
|
CVE-2020-0009
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1458
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
|
CVE-2019-1476
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-5825
MEDIUM 6.5
Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
|
CVE-2019-13720
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-1405
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP… |
|
CVE-2019-1347
HIGH · vendor
Windows Denial of Service Vulnerability |
|
CVE-2019-1346
HIGH · vendor
Windows Denial of Service Vulnerability |
|
CVE-2019-1345
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1344
HIGH · vendor
Windows Code Integrity Module Information Disclosure Vulnerability |
|
CVE-2019-1343
HIGH · vendor
Windows Denial of Service Vulnerability |
|
CVE-2019-1322
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-11932
HIGH 8.8
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android… |
|
CVE-2019-2215
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1253
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1245
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1244
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1215
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-10529
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-5715
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-1184
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1170
HIGH · vendor
Windows NTFS Elevation of Privilege Vulnerability |
|
CVE-2019-1153
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2019-1152
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1151
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1150
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1149
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1148
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2019-1145
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1144
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1125
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-9816
MEDIUM 5.9
A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security ch… |
|
CVE-2019-11708
CRITICAL 10.0
KEV
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op… |
|
CVE-2019-11707
HIGH 8.8
KEV
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware… |
|
CVE-2019-11706
HIGH 7.5
A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when processing certain email messages, resulti… |
|
CVE-2019-11705
CRITICAL 9.8
A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when processing certain email messages, resulting in … |
|
CVE-2019-11704
CRITICAL 9.8
A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when processing certain email messages, resulting… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.