Vulnerabilities
Tracked app vulnerabilities
639 CVEs affect a tracked app or OS (all severities, all platforms). 373 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 639
- Actively exploited
- 373
- Publication window
- 1999-11-11 → 2026-05-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-5375
CRITICAL 9.8
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird <… |
|
CVE-2016-9899
CRITICAL 9.8
Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 5… |
|
CVE-2016-9079
HIGH 7.5
KEV
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a… |
|
CVE-2018-8174
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution … |
|
CVE-2018-8145
HIGH 7.5
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to… |
|
CVE-2018-8139
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8133
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0953
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-0946
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor… |
|
CVE-2018-8897
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8134
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0824
Microsoft COM for Windows Remote Code Execution Vulnerability |
|
CVE-2018-0980
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0975
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0974
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0973
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0972
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0971
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0970
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0969
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0968
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0966
HIGH · vendor
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2018-6849
MEDIUM 4.3
In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), th… |
|
CVE-2016-5348
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2015-9222
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-0934
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0933
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0891
MEDIUM 4.3
ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and I… |
|
CVE-2018-0901
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0897
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0895
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0894
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0886
HIGH · vendor
CredSSP Remote Code Execution Vulnerability |
|
CVE-2018-0882
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-0880
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-0878
HIGH · vendor
Windows Remote Assistance Information Disclosure Vulnerability |
|
CVE-2018-0877
HIGH · vendor
Windows Desktop Bridge VFS Elevation of Privilege Vulnerability |
|
CVE-2017-13262
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13261
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13260
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13258
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2017-13253
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2018-0860
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0840
HIGH 7.5
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and… |
|
CVE-2018-0838
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0837
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0835
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0834
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0832
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0826
HIGH · vendor
Windows Storage Services Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.