Vulnerabilities
Tracked app vulnerabilities
18,849 CVEs affect a tracked app or OS (all severities, Windows). 305 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,849
- Actively exploited
- 305
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-17129
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17128
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17127
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17126
MEDIUM 5.5
Microsoft Excel Information Disclosure Vulnerability |
|
CVE-2020-17125
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17124
HIGH 7.8
Microsoft PowerPoint Remote Code Execution Vulnerability |
|
CVE-2020-17123
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17119
MEDIUM 6.5
Microsoft Outlook Information Disclosure Vulnerability |
|
CVE-2020-26970
HIGH 8.8
When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on p… |
|
CVE-2020-26968
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption and we presu… |
|
CVE-2020-26966
MEDIUM 6.5
Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; res… |
|
CVE-2020-26965
MEDIUM 6.5
Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when… |
|
CVE-2020-26961
MEDIUM 6.5
When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver.… |
|
CVE-2020-26960
HIGH 8.8
If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free… |
|
CVE-2020-26959
HIGH 8.8
During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potent… |
|
CVE-2020-26958
MEDIUM 6.1
Firefox did not block execution of scripts with incorrect MIME types when the response was intercepted and cached through a ServiceWorker. This could lead to a… |
|
CVE-2020-26956
MEDIUM 6.1
In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerability affects Firefox … |
|
CVE-2020-26953
MEDIUM 4.3
It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or other… |
|
CVE-2020-26951
MEDIUM 6.1
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of expl… |
|
CVE-2020-26950
HIGH 8.8
In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerab… |
|
CVE-2020-27895
LOW 3.3
An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTune… |
|
CVE-2020-9999
HIGH 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a m… |
|
CVE-2020-17140
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2020-17139
HIGH · vendor
Windows Overlay Filter Security Feature Bypass Vulnerability |
|
CVE-2020-17138
HIGH · vendor
Windows Error Reporting Information Disclosure Vulnerability |
|
CVE-2020-17137
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-17136
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2020-17134
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2020-17103
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2020-17099
HIGH · vendor
Windows Lock Screen Security Feature Bypass Vulnerability |
|
CVE-2020-17098
HIGH · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2020-17097
HIGH · vendor
Windows Digital Media Receiver Elevation of Privilege Vulnerability |
|
CVE-2020-17096
HIGH · vendor
Windows NTFS Remote Code Execution Vulnerability |
|
CVE-2020-17095
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2020-17094
HIGH · vendor
Windows Error Reporting Information Disclosure Vulnerability |
|
CVE-2020-17092
HIGH · vendor
Windows Network Connections Service Elevation of Privilege Vulnerability |
|
CVE-2020-16996
HIGH · vendor
Kerberos Security Feature Bypass Vulnerability |
|
CVE-2020-16964
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16963
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16962
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16961
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16960
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16959
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16958
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-17091
HIGH 7.8
Microsoft Teams Remote Code Execution Vulnerability |
|
CVE-2020-17067
HIGH 7.8
Microsoft Excel Security Feature Bypass Vulnerability |
|
CVE-2020-17066
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17065
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17064
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17058
HIGH 7.5
Microsoft Browser Memory Corruption Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.