Vulnerabilities
Tracked app vulnerabilities
7,750 CVEs affect a tracked app or OS (all severities, Windows). 213 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 7,750
- Actively exploited
- 213
- Publication window
- 2007-08-28 → 2026-08-19
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-1318
HIGH 7.7
Microsoft Windows Transport Layer Security Spoofing Vulnerability |
|
CVE-2019-1317
HIGH 6.4
Microsoft Windows Denial of Service Vulnerability |
|
CVE-2019-1316
HIGH 7.3
Microsoft Windows Setup Elevation of Privilege Vulnerability |
|
CVE-2019-1315
HIGH 7.8
KEV
Windows Error Reporting Manager Elevation of Privilege Vulnerability |
|
CVE-2019-1311
HIGH 7.8
Windows Imaging API Remote Code Execution Vulnerability |
|
CVE-2019-1230
HIGH 6.8
Hyper-V Information Disclosure Vulnerability |
|
CVE-2019-1166
HIGH 5.9
Windows NTLM Tampering Vulnerability |
|
CVE-2019-1060
CRITICAL 7.5
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-16935
MEDIUM 6.1
1 app
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/Do… |
|
CVE-2019-11755
HIGH 7.5
1 app
A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the sign… |
|
CVE-2019-11752
HIGH 8.8
1 app
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploi… |
|
CVE-2019-11746
HIGH 8.8
1 app
A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable c… |
|
CVE-2019-11744
MEDIUM 6.1
1 app
Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating them as markup. It is possible to pass a li… |
|
CVE-2019-11743
LOW 3.7
1 app
Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts … |
|
CVE-2019-11742
MEDIUM 6.5
1 app
A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a <canvas> element due to an err… |
|
CVE-2019-11740
HIGH 8.8
1 app
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these bugs showed evidenc… |
|
CVE-2019-11739
MEDIUM 6.5
1 app
Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunde… |
|
CVE-2019-1303
HIGH
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1294
HIGH 5.3
Windows Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2019-1293
HIGH 5.5
Windows SMB Client Driver Information Disclosure Vulnerability |
|
CVE-2019-1292
HIGH 7.8
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1291
CRITICAL 7.5
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-1290
CRITICAL 7.5
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-1289
HIGH 7.0
Windows Update Delivery Optimization Elevation of Privilege Vulnerability |
|
CVE-2019-1287
HIGH 7.8
Windows Network Connectivity Assistant Elevation of Privilege Vulnerability |
|
CVE-2019-1286
HIGH 5.5
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1285
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1282
HIGH 5.5
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2019-1280
CRITICAL 7.3
LNK Remote Code Execution Vulnerability |
|
CVE-2019-1278
HIGH 7.8
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1277
HIGH 7.8
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1274
HIGH 6.3
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1273
HIGH 8.2
Active Directory Federation Services XSS Vulnerability |
|
CVE-2019-1272
HIGH 6.3
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-1271
HIGH 7.0
Windows Media Elevation of Privilege Vulnerability |
|
CVE-2019-1270
HIGH 6.3
Microsoft Windows Store Installer Elevation of Privilege Vulnerability |
|
CVE-2019-1269
HIGH 6.3
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2019-1268
HIGH 6.5
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2019-1267
HIGH 7.3
Microsoft Compatibility Appraiser Elevation of Privilege Vulnerability |
|
CVE-2019-1256
HIGH 7.8
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1254
HIGH 5.5
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2019-1253
HIGH 7.8
KEV
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1252
HIGH 5.5
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1251
HIGH 5.5
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1250
HIGH 7.8
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1249
HIGH 7.8
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1248
HIGH 7.8
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1247
HIGH 7.8
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1246
HIGH 7.8
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1245
HIGH 6.5
DirectWrite Information Disclosure Vulnerability |