Vulnerabilities
Tracked app vulnerabilities
7,750 CVEs affect a tracked app or OS (all severities, Windows). 213 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 7,750
- Actively exploited
- 213
- Publication window
- 2007-08-28 → 2026-08-19
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-1168
HIGH 7.8
Microsoft Windows p2pimsvc Elevation of Privilege Vulnerability |
|
CVE-2019-1164
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2019-1163
HIGH 5.5
Windows File Signature Security Feature Bypass Vulnerability |
|
CVE-2019-1162
HIGH 7.8
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2019-1159
HIGH 7.8
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2019-1158
HIGH 5.5
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2019-1157
HIGH 7.8
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1156
HIGH 7.8
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1155
HIGH 7.8
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1153
HIGH 5.5
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2019-1152
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1151
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1150
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1149
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1148
HIGH 5.5
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2019-1147
HIGH 7.8
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1146
HIGH 7.8
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1145
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1144
CRITICAL 8.8
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2019-1143
HIGH 5.5
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2019-1125
HIGH 5.6
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1078
HIGH 5.5
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2019-1057
HIGH 7.5
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-0965
CRITICAL 7.6
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-0736
CRITICAL 9.8
Windows DHCP Client Remote Code Execution Vulnerability |
|
CVE-2019-0723
HIGH 5.8
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-0720
CRITICAL 8.0
Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-0718
HIGH 5.8
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-0717
HIGH 5.8
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-0716
HIGH 5.8
Windows Denial of Service Vulnerability |
|
CVE-2019-0715
HIGH 5.8
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-0714
HIGH 5.8
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-9820
CRITICAL 9.8
1 app
A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results in a potentially exploitable crash. This… |
|
CVE-2019-9819
CRITICAL 9.8
1 app
A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable crash. This vulnerab… |
|
CVE-2019-9818
HIGH 8.3
1 app
A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main pr… |
|
CVE-2019-9817
MEDIUM 5.3
1 app
Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violati… |
|
CVE-2019-9816
MEDIUM 5.9
1 app
A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security ch… |
|
CVE-2019-9815
HIGH 8.1
1 app
If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to… |
|
CVE-2019-9811
HIGH 8.3
1 app
As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that … |
|
CVE-2019-9800
CRITICAL 9.8
1 app
Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed e… |
|
CVE-2019-11730
MEDIUM 6.5
1 app
A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directo… |
|
CVE-2019-11729
HIGH 7.5
1 app
Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This … |
|
CVE-2019-11719
HIGH 7.5
1 app
When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Servic… |
|
CVE-2019-11717
MEDIUM 5.3
1 app
A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible … |
|
CVE-2019-11715
MEDIUM 6.1
1 app
Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certa… |
|
CVE-2019-11713
CRITICAL 9.8
1 app
A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash. This… |
|
CVE-2019-11712
HIGH 8.8
1 app
POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to per… |
|
CVE-2019-11711
HIGH 8.8
1 app
When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages on different subdomains ever cooperative… |
|
CVE-2019-11709
CRITICAL 9.8
1 app
Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. Some of these bugs showed evidence of memory c… |
|
CVE-2019-11708
CRITICAL 10.0
KEV
1 app
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op… |