Vulnerabilities
Tracked app vulnerabilities
565 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 565
- Actively exploited
- 303
- Publication window
- 1999-11-11 → 2026-04-14
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-8413
HIGH · vendor
Windows Theme API Remote Code Execution Vulnerability |
|
CVE-2018-8411
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2018-17456
CRITICAL 9.8
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code executio… |
|
CVE-2018-8469
HIGH 7.4
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr… |
|
CVE-2018-8467
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8466
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8463
HIGH 7.4
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr… |
|
CVE-2018-8468
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-8449
HIGH · vendor
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2018-8410
HIGH · vendor
Windows Registry Elevation of Privilege Vulnerability |
|
CVE-2018-8355
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-0952
HIGH · vendor
Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability |
|
CVE-2018-8291
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-8288
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-8279
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8229
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8214
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-8208
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-0982
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-5159
CRITICAL 9.8
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds wr… |
|
CVE-2017-5465
CRITICAL 9.1
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied i… |
|
CVE-2017-5447
CRITICAL 9.1
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to … |
|
CVE-2017-5404
CRITICAL 9.8
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results i… |
|
CVE-2017-5375
CRITICAL 9.8
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird <… |
|
CVE-2016-9899
CRITICAL 9.8
Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 5… |
|
CVE-2016-9079
HIGH 7.5
KEV
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a… |
|
CVE-2018-8174
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution … |
|
CVE-2018-8145
HIGH 7.5
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to… |
|
CVE-2018-8139
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8133
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0953
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-0946
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8897
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8134
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0824
Microsoft COM for Windows Remote Code Execution Vulnerability |
|
CVE-2018-0980
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0975
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0974
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0973
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0972
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0971
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0970
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0969
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0968
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0966
HIGH · vendor
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2018-0934
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0933
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0891
MEDIUM 4.3
ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and I… |
|
CVE-2018-0901
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0897
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.