Vulnerabilities

Tracked app vulnerabilities

393 CVEs affect a tracked app or OS (all severities, all platforms). 286 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 393
Actively exploited: 286
Publication window: 2004-08-06 → 2026-05-04

All CVEs 16,427 CISA KEV 286 Public exploit 393 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

393 entries Public exploit Clear all

CVE	Severity	KEV	Apps	Published
CVE-2019-0948 MEDIUM 4.7 2019-06-11 Windows Event Viewer Information Disclosure Vulnerability	MEDIUM 4.7	—	—	2019-06-11
CVE-2019-0943 HIGH 7.8 2019-06-11 Windows ALPC Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-06-11
CVE-2019-10038 HIGH 7.8 1 app 2019-05-31 Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.a…	HIGH 7.8	—	Evernote	2019-05-31
CVE-2019-0881 HIGH 8.8 2019-05-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 8.8	—	—	2019-05-14
CVE-2019-0863 HIGH 7.8 KEV 2019-05-14 Windows Error Reporting Elevation of Privilege Vulnerability	HIGH 7.8	KEV	—	2019-05-14
CVE-2019-9813 HIGH 8.8 1 app 2019-04-26 Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulne…	HIGH 8.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9810 HIGH 8.8 1 app 2019-04-26 Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerabili…	HIGH 8.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9792 CRITICAL 9.8 1 app 2019-04-26 The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout. This magic value can then b…	CRITICAL 9.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9791 CRITICAL 9.8 1 app 2019-04-26 The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just…	CRITICAL 9.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-0841 HIGH 6.8 KEV 2019-04-09 Windows Elevation of Privilege Vulnerability	HIGH 6.8	KEV	—	2019-04-09
CVE-2019-0836 HIGH 7.0 2019-04-09 Windows Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2019-04-09
CVE-2019-0805 HIGH 6.7 2019-04-09 Windows Elevation of Privilege Vulnerability	HIGH 6.7	—	—	2019-04-09
CVE-2019-0803 HIGH 7.0 KEV 2019-04-09 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	KEV	—	2019-04-09
CVE-2019-0796 HIGH 6.3 2019-04-09 Windows Elevation of Privilege Vulnerability	HIGH 6.3	—	—	2019-04-09
CVE-2019-0735 HIGH 7.0 2019-04-09 Windows CSRSS Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2019-04-09
CVE-2019-0732 HIGH 5.3 2019-04-09 Windows Security Feature Bypass Vulnerability	HIGH 5.3	—	—	2019-04-09
CVE-2019-0731 HIGH 6.8 2019-04-09 Windows Elevation of Privilege Vulnerability	HIGH 6.8	—	—	2019-04-09
CVE-2019-0730 HIGH 6.7 2019-04-09 Windows Elevation of Privilege Vulnerability	HIGH 6.7	—	—	2019-04-09
CVE-2019-2025 HIGH 2019-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2019-03-01
CVE-2019-2023 HIGH 2019-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2019-03-01
CVE-2018-20250 HIGH 7.8 KEV 1 app 2019-02-05 In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When…	HIGH 7.8	KEV	WinRAR	2019-02-05
CVE-2019-2000 HIGH 2019-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2019-02-01
CVE-2019-1999 HIGH 2019-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2019-02-01
CVE-2019-0574 HIGH 7.8 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-01-08
CVE-2019-0573 HIGH 7.8 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-01-08
CVE-2019-0572 HIGH 7.8 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-01-08
CVE-2019-0571 HIGH 7.8 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-01-08
CVE-2019-0570 HIGH 7.8 2019-01-08 Windows Runtime Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-01-08
CVE-2019-0555 HIGH 7.0 2019-01-08 Microsoft XmlDocument Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2019-01-08
CVE-2019-0552 HIGH 7.0 2019-01-08 Windows COM Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2019-01-08
CVE-2019-0543 HIGH 7.8 KEV 2019-01-08 Microsoft Windows Elevation of Privilege Vulnerability	HIGH 7.8	KEV	—	2019-01-08
CVE-2018-17182 HIGH 2019-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2019-01-01
CVE-2018-13405 HIGH 2019-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2019-01-01
CVE-2018-8584 HIGH 7.8 2018-11-13 Windows ALPC Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2018-11-13
CVE-2018-8550 HIGH 7.0 2018-11-13 Windows COM Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-11-13
CVE-2018-8544 CRITICAL 7.5 2018-11-13 Windows VBScript Engine Remote Code Execution Vulnerability	CRITICAL 7.5	—	—	2018-11-13
CVE-2018-8453 HIGH 7.8 KEV 2018-10-10 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…	HIGH 7.8	KEV	—	2018-10-10
CVE-2018-8413 HIGH 5.0 2018-10-09 Windows Theme API Remote Code Execution Vulnerability	HIGH 5.0	—	—	2018-10-09
CVE-2018-8411 HIGH 7.0 2018-10-09 NTFS Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-10-09
CVE-2018-13042 MEDIUM 5.9 1 app 2018-10-05 The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity com.agilebits.onepassword.filling.openyolo…	MEDIUM 5.9	—	1Password	2018-10-05
CVE-2018-9515 HIGH 2018-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2018-10-01
CVE-2018-8468 HIGH 4.3 2018-09-11 Windows Elevation of Privilege Vulnerability	HIGH 4.3	—	—	2018-09-11
CVE-2018-8449 HIGH 5.3 2018-09-11 Device Guard Security Feature Bypass Vulnerability	HIGH 5.3	—	—	2018-09-11
CVE-2018-8410 HIGH 7.0 2018-09-11 Windows Registry Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-09-11
CVE-2018-9488 MEDIUM 2018-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM	—	—	2018-09-01
CVE-2018-0952 HIGH 6.7 2018-08-14 Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability	HIGH 6.7	—	—	2018-08-14
CVE-2018-9445 HIGH 2018-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2018-08-01
CVE-2018-8214 HIGH 7.0 2018-06-12 Windows Desktop Bridge Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-06-12
CVE-2018-8208 HIGH 7.0 2018-06-12 Windows Desktop Bridge Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-06-12
CVE-2018-0982 HIGH 7.0 2018-06-12 Windows Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-06-12