Vulnerabilities

Tracked app vulnerabilities

639 CVEs affect a tracked app or OS (all severities, all platforms). 373 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 639
Actively exploited: 373
Publication window: 1999-11-11 → 2026-05-04

All CVEs 26,416 CISA KEV 373 Public exploit 639 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

639 entries Public exploit Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-0823 HIGH · vendor Windows 2018-02-13 Named Pipe File System Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0822 HIGH · vendor Windows 2018-02-13 Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0821 HIGH · vendor Windows 2018-02-13 Windows AppContainer Elevation Of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2017-5124 MEDIUM 6.1 2018-02-07 Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a …	MEDIUM 6.1	—		2018-02-07
CVE-2017-13236 MEDIUM · vendor Android 2018-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM · vendor	—	Android	2018-02-01
CVE-2018-0752 HIGH · vendor Windows 2018-01-09 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0751 HIGH · vendor Windows 2018-01-09 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0749 HIGH · vendor Windows 2018-01-09 SMB Server Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0748 HIGH · vendor Windows 2018-01-09 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0746 HIGH · vendor Windows 2018-01-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0745 HIGH · vendor Windows 2018-01-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0744 HIGH · vendor Windows 2018-01-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0743 HIGH · vendor Windows 2018-01-09 Windows Subsystem for Linux Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0780 MEDIUM 5.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…	MEDIUM 5.3	—	Microsoft Edge	2018-01-04
CVE-2018-0777 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0776 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0775 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0774 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0770 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0769 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0767 MEDIUM 5.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user'…	MEDIUM 5.3	—	Microsoft Edge	2018-01-04
CVE-2018-0758 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2017-5753 MEDIUM 5.6 Android 2018-01-04 Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local u…	MEDIUM 5.6	—	Android	2018-01-04
CVE-2017-13216 HIGH · vendor Android 2018-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2018-01-01
CVE-2017-13209 HIGH · vendor Android 2018-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2018-01-01
CVE-2017-11918 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the curren…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11914 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11911 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11909 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11893 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11885 HIGH · vendor Windows 2017-12-12 Windows RRAS Service Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2017-12-12
CVE-2017-7533 HIGH · vendor Android 2017-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-12-01
CVE-2017-13156 HIGH · vendor Android 2017-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-12-01
CVE-2017-11873 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same us…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11870 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, d…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11861 HIGH 7.5 Microsoft Edge 2017-11-15 Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the curr…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11841 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11840 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11839 HIGH 7.5 Microsoft Edge 2017-11-15 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affect…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11831 HIGH · vendor Windows 2017-11-14 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11830 HIGH · vendor Windows 2017-11-14 Device Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11811 HIGH 7.5 Microsoft Edge 2017-10-13 ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte…	HIGH 7.5	—	Microsoft Edge	2017-10-13
CVE-2017-11809 HIGH 7.5 Microsoft Edge 2017-10-13 ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte…	HIGH 7.5	—	Microsoft Edge	2017-10-13
CVE-2017-11802 HIGH 7.5 Microsoft Edge 2017-10-13 ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte…	HIGH 7.5	—	Microsoft Edge	2017-10-13
CVE-2017-11799 HIGH 7.5 Microsoft Edge 2017-10-13 ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte…	HIGH 7.5	—	Microsoft Edge	2017-10-13
CVE-2017-11823 HIGH · vendor Windows 2017-10-10 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11785 HIGH · vendor Windows 2017-10-10 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-1000117 HIGH 8.8 Git 2017-10-05 A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on …	HIGH 8.8	—	Git	2017-10-05
CVE-2017-14496 HIGH · vendor Android 2017-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	—	Android	2017-10-01
CVE-2017-8755 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use…	HIGH 7.5	—	Microsoft Edge	2017-09-13

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM