Vulnerabilities
Tracked app vulnerabilities
404 CVEs affect a tracked app or OS (High, all platforms). 294 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 404
- Actively exploited
- 294
- Publication window
- 2009-10-13 → 2026-05-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-8288
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-8279
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8229
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8214
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-8208
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-0982
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2016-9079
HIGH 7.5
KEV
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a… |
|
CVE-2018-8174
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution … |
|
CVE-2018-8145
HIGH 7.5
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to… |
|
CVE-2018-8139
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8133
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0953
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-0946
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8897
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8134
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0824
Microsoft COM for Windows Remote Code Execution Vulnerability |
|
CVE-2018-0980
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0975
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0974
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0973
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0972
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0971
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0970
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0969
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0968
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0966
HIGH · vendor
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2016-5348
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9222
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-0934
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0933
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0901
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0897
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0895
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0894
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0886
HIGH · vendor
CredSSP Remote Code Execution Vulnerability |
|
CVE-2018-0882
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-0880
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-0878
HIGH · vendor
Windows Remote Assistance Information Disclosure Vulnerability |
|
CVE-2018-0877
HIGH · vendor
Windows Desktop Bridge VFS Elevation of Privilege Vulnerability |
|
CVE-2017-13262
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13261
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13260
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13258
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13253
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-0860
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0840
HIGH 7.5
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and… |
|
CVE-2018-0838
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0837
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0835
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0834
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.