Vulnerabilities
Tracked app vulnerabilities
565 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 565
- Actively exploited
- 303
- Publication window
- 1999-11-11 → 2026-04-14
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-0895
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0894
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0886
HIGH · vendor
CredSSP Remote Code Execution Vulnerability |
|
CVE-2018-0882
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-0880
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
|
CVE-2018-0878
HIGH · vendor
Windows Remote Assistance Information Disclosure Vulnerability |
|
CVE-2018-0877
HIGH · vendor
Windows Desktop Bridge VFS Elevation of Privilege Vulnerability |
|
CVE-2018-0860
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0840
HIGH 7.5
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and… |
|
CVE-2018-0838
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0837
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0835
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0834
HIGH 7.5
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script… |
|
CVE-2018-0832
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0826
HIGH · vendor
Windows Storage Services Elevation of Privilege Vulnerability |
|
CVE-2018-0823
HIGH · vendor
Named Pipe File System Elevation of Privilege Vulnerability |
|
CVE-2018-0822
HIGH · vendor
Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability |
|
CVE-2018-0821
HIGH · vendor
Windows AppContainer Elevation Of Privilege Vulnerability |
|
CVE-2017-5124
MEDIUM 6.1
Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a … |
|
CVE-2018-0752
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0751
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0749
HIGH · vendor
SMB Server Elevation of Privilege Vulnerability |
|
CVE-2018-0748
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0746
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0745
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0744
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-0743
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2018-0780
MEDIUM 5.3
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the… |
|
CVE-2018-0777
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… |
|
CVE-2018-0776
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… |
|
CVE-2018-0775
HIGH 7.5
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje… |
|
CVE-2018-0774
HIGH 7.5
Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje… |
|
CVE-2018-0770
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… |
|
CVE-2018-0769
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… |
|
CVE-2018-0767
MEDIUM 5.3
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user'… |
|
CVE-2018-0758
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u… |
|
CVE-2017-11918
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the curren… |
|
CVE-2017-11914
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user… |
|
CVE-2017-11911
HIGH 7.5
ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due … |
|
CVE-2017-11909
HIGH 7.5
ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due … |
|
CVE-2017-11893
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the … |
|
CVE-2017-11885
HIGH · vendor
Windows RRAS Service Remote Code Execution Vulnerability |
|
CVE-2017-11873
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same us… |
|
CVE-2017-11870
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, d… |
|
CVE-2017-11861
HIGH 7.5
Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the curr… |
|
CVE-2017-11841
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s… |
|
CVE-2017-11840
HIGH 7.5
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s… |
|
CVE-2017-11839
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affect… |
|
CVE-2017-11831
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-11830
HIGH · vendor
Device Guard Security Feature Bypass Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.