Vulnerabilities

Tracked app vulnerabilities

404 CVEs affect a tracked app or OS (High, all platforms). 294 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 404
Actively exploited: 294
Publication window: 2009-10-13 → 2026-05-04

All CVEs 15,822 CISA KEV 294 Public exploit 404 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

404 entries High Public exploit Clear all

CVE	Severity	KEV	Apps	Published
CVE-2019-0735 HIGH · vendor Windows 2019-04-09 Windows CSRSS Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-04-09
CVE-2019-0732 HIGH · vendor Windows 2019-04-09 Windows Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2019-04-09
CVE-2019-0731 HIGH · vendor Windows 2019-04-09 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-04-09
CVE-2019-0730 HIGH · vendor Windows 2019-04-09 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-04-09
CVE-2019-2025 HIGH · vendor Android 2019-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2019-03-01
CVE-2019-2023 HIGH · vendor Android 2019-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2019-03-01
CVE-2018-20250 HIGH 7.8 KEV WinRAR 2019-02-05 In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When…	HIGH 7.8	KEV	WinRAR	2019-02-05
CVE-2019-2000 HIGH · vendor Android 2019-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2019-02-01
CVE-2019-1999 HIGH · vendor Android 2019-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2019-02-01
CVE-2018-6126 HIGH 8.8 2019-01-09 A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.	HIGH 8.8	—		2019-01-09
CVE-2018-6084 HIGH 7.8 2019-01-09 Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via…	HIGH 7.8	—		2019-01-09
CVE-2018-16083 HIGH 8.8 2019-01-09 An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds m…	HIGH 8.8	—		2019-01-09
CVE-2018-16071 HIGH 8.8 2019-01-09 A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.	HIGH 8.8	—		2019-01-09
CVE-2016-9651 HIGH 8.8 2019-01-09 A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary co…	HIGH 8.8	—		2019-01-09
CVE-2019-0568 HIGH 7.5 Microsoft Edge 2019-01-08 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2019-01-08
CVE-2019-0567 HIGH 7.5 Microsoft Edge 2019-01-08 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2019-01-08
CVE-2019-0566 HIGH 8.8 Microsoft Edge 2019-01-08 An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulnerability." This aff…	HIGH 8.8	—	Microsoft Edge	2019-01-08
CVE-2019-0539 HIGH 7.5 Microsoft Edge 2019-01-08 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2019-01-08
CVE-2019-0574 HIGH · vendor Windows 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0573 HIGH · vendor Windows 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0572 HIGH · vendor Windows 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0571 HIGH · vendor Windows 2019-01-08 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0570 HIGH · vendor Windows 2019-01-08 Windows Runtime Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0555 HIGH · vendor Windows 2019-01-08 Microsoft XmlDocument Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0552 HIGH · vendor Windows 2019-01-08 Windows COM Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-01-08
CVE-2019-0543 HIGH · vendor KEV Windows 2019-01-08 Microsoft Windows Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2019-01-08
CVE-2018-17182 HIGH · vendor Android 2019-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2019-01-01
CVE-2018-13405 HIGH · vendor Android 2019-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2019-01-01
CVE-2018-8617 HIGH 7.5 Microsoft Edge 2018-12-12 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-12-12
CVE-2018-6092 HIGH 8.8 2018-12-04 An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandb…	HIGH 8.8	—		2018-12-04
CVE-2018-6065 HIGH 8.8 2018-11-14 Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a r…	HIGH 8.8	—		2018-11-14
CVE-2018-6064 HIGH 8.8 2018-11-14 Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap co…	HIGH 8.8	—		2018-11-14
CVE-2018-17463 HIGH 8.8 2018-11-14 Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafte…	HIGH 8.8	—		2018-11-14
CVE-2018-8584 HIGH · vendor Windows 2018-11-13 Windows ALPC Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-11-13
CVE-2018-8550 HIGH · vendor Windows 2018-11-13 Windows COM Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-11-13
CVE-2018-8453 HIGH 7.8 KEV Windows 2018-10-10 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…	HIGH 7.8	KEV	Windows	2018-10-10
CVE-2018-8413 HIGH · vendor Windows 2018-10-09 Windows Theme API Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8411 HIGH · vendor Windows 2018-10-09 NTFS Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-9515 HIGH · vendor Android 2018-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2018-10-01
CVE-2018-8469 HIGH 7.4 Microsoft Edge 2018-09-13 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 7.4	—	Microsoft Edge	2018-09-13
CVE-2018-8467 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8466 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8463 HIGH 7.4 Microsoft Edge 2018-09-13 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 7.4	—	Microsoft Edge	2018-09-13
CVE-2018-8468 HIGH · vendor Windows 2018-09-11 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8449 HIGH · vendor Windows 2018-09-11 Device Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8410 HIGH · vendor Windows 2018-09-11 Windows Registry Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8355 HIGH 7.5 Microsoft Edge 2018-08-15 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-08-15
CVE-2018-0952 HIGH · vendor Windows 2018-08-14 Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-08-14
CVE-2018-9445 HIGH · vendor Android 2018-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2018-08-01
CVE-2018-8291 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-07-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM