Vulnerabilities

Tracked app vulnerabilities

393 CVEs affect a tracked app or OS (all severities, all platforms). 286 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 393
Actively exploited: 286
Publication window: 2004-08-06 → 2026-05-04

All CVEs 16,427 CISA KEV 286 Public exploit 393 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

393 entries Public exploit Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-5159 CRITICAL 9.8 1 app 2018-06-11 An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds wr…	CRITICAL 9.8	—	Mozilla Thunderbird	2018-06-11
CVE-2017-5465 CRITICAL 9.1 1 app 2018-06-11 An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied i…	CRITICAL 9.1	—	Mozilla Thunderbird	2018-06-11
CVE-2017-5447 CRITICAL 9.1 1 app 2018-06-11 An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to …	CRITICAL 9.1	—	Mozilla Thunderbird	2018-06-11
CVE-2017-5404 CRITICAL 9.8 1 app 2018-06-11 A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results i…	CRITICAL 9.8	—	Mozilla Thunderbird	2018-06-11
CVE-2017-5375 CRITICAL 9.8 1 app 2018-06-11 JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird <…	CRITICAL 9.8	—	Mozilla Thunderbird	2018-06-11
CVE-2016-9899 CRITICAL 9.8 1 app 2018-06-11 Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 5…	CRITICAL 9.8	—	Mozilla Thunderbird	2018-06-11
CVE-2016-9079 HIGH 7.5 KEV 1 app 2018-06-11 A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a…	HIGH 7.5	KEV	Mozilla Thunderbird	2018-06-11
CVE-2018-8174 HIGH 7.5 KEV 2018-05-09 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution …	HIGH 7.5	KEV	—	2018-05-09
CVE-2018-8897 HIGH 7.0 2018-05-08 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-05-08
CVE-2018-8134 HIGH 7.0 2018-05-08 Windows Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-05-08
CVE-2018-0824 HIGH 7.5 KEV 2018-05-08 Microsoft COM for Windows Remote Code Execution Vulnerability	HIGH 7.5	KEV	—	2018-05-08
CVE-2018-0975 HIGH 4.7 2018-04-10 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-04-10
CVE-2018-0974 HIGH 4.7 2018-04-10 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-04-10
CVE-2018-0973 HIGH 4.7 2018-04-10 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-04-10
CVE-2018-0972 HIGH 4.7 2018-04-10 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-04-10
CVE-2018-0971 HIGH 4.7 2018-04-10 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-04-10
CVE-2018-0970 HIGH 4.7 2018-04-10 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-04-10
CVE-2018-0969 HIGH 4.7 2018-04-10 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-04-10
CVE-2018-0968 HIGH 4.7 2018-04-10 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-04-10
CVE-2018-0966 HIGH 5.3 2018-04-10 Device Guard Security Feature Bypass Vulnerability	HIGH 5.3	—	—	2018-04-10
CVE-2018-6849 MEDIUM 4.3 2 apps 2018-04-01 In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), th…	MEDIUM 4.3	—	2	2018-04-01
CVE-2016-5348 HIGH 2018-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2018-04-01
CVE-2015-9222 HIGH 2018-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2018-04-01
CVE-2018-0901 HIGH 4.7 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-03-13
CVE-2018-0897 HIGH 4.7 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-03-13
CVE-2018-0895 HIGH 4.7 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-03-13
CVE-2018-0894 HIGH 4.7 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-03-13
CVE-2018-0886 HIGH 7.1 2018-03-13 CredSSP Remote Code Execution Vulnerability	HIGH 7.1	—	—	2018-03-13
CVE-2018-0882 HIGH 7.0 2018-03-13 Windows Desktop Bridge Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-03-13
CVE-2018-0880 HIGH 7.0 2018-03-13 Windows Desktop Bridge Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-03-13
CVE-2018-0878 HIGH 3.1 2018-03-13 Windows Remote Assistance Information Disclosure Vulnerability	HIGH 3.1	—	—	2018-03-13
CVE-2018-0877 HIGH 7.0 2018-03-13 Windows Desktop Bridge VFS Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-03-13
CVE-2017-13262 HIGH 2018-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2018-03-01
CVE-2017-13261 HIGH 2018-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2018-03-01
CVE-2017-13260 HIGH 2018-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2018-03-01
CVE-2017-13258 HIGH 2018-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2018-03-01
CVE-2017-13253 HIGH 2018-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2018-03-01
CVE-2018-0832 HIGH 4.7 2018-02-13 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-02-13
CVE-2018-0826 HIGH 7.0 2018-02-13 Windows Storage Services Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-02-13
CVE-2018-0823 HIGH 7.0 2018-02-13 Named Pipe File System Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-02-13
CVE-2018-0822 HIGH 7.0 2018-02-13 Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-02-13
CVE-2018-0821 HIGH 5.3 2018-02-13 Windows AppContainer Elevation Of Privilege Vulnerability	HIGH 5.3	—	—	2018-02-13
CVE-2017-13236 MEDIUM 2018-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM	—	—	2018-02-01
CVE-2018-0752 HIGH 6.6 2018-01-09 Windows Elevation of Privilege Vulnerability	HIGH 6.6	—	—	2018-01-09
CVE-2018-0751 HIGH 6.6 2018-01-09 Windows Elevation of Privilege Vulnerability	HIGH 6.6	—	—	2018-01-09
CVE-2018-0749 HIGH 6.6 2018-01-09 SMB Server Elevation of Privilege Vulnerability	HIGH 6.6	—	—	2018-01-09
CVE-2018-0748 HIGH 6.6 2018-01-09 Windows Elevation of Privilege Vulnerability	HIGH 6.6	—	—	2018-01-09
CVE-2018-0746 HIGH 4.7 2018-01-09 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-01-09
CVE-2018-0745 HIGH 4.7 2018-01-09 Windows Kernel Information Disclosure Vulnerability	HIGH 4.7	—	—	2018-01-09
CVE-2018-0744 HIGH 7.0 2018-01-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2018-01-09