Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

18,849 CVEs affect a tracked app or OS (all severities, Windows). 305 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
18,849
Actively exploited
305
Publication window
2004-07-27 → 2026-11-11
All CVEs 18,849 CISA KEV 305 Public exploit 428 All severities Critical High Medium Low Hide N/A
All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,849 entries Windows Hide N/A Clear all
CVE
CVE-2020-15970
HIGH 8.8
Chrome Google Chrome

Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo…
CVE-2020-15969
HIGH 8.8
Chrome Google Chrome Safari

Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-15968
HIGH 8.8
Chrome Google Chrome

Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-15967
HIGH 8.8
Chrome Google Chrome

Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-9961
HIGH 7.8
iTunes

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Securi…
CVE-2020-15683
CRITICAL 9.8
Mozilla Thunderbird Mozilla Firefox

Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory c…
CVE-2020-27619
CRITICAL 9.8
Python 3.12 Python 3.13 Python 3.14

In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
CVE-2020-16949
MEDIUM 4.7
Microsoft Office Microsoft Outlook Office

<p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who success…
CVE-2020-16947
HIGH 7.5
Microsoft Office Microsoft Outlook Office

<p>A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who suc…
CVE-2020-16933
HIGH 7.0
Microsoft Office Microsoft Word Office

<p>A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files. An attacker who successfully exploite…
CVE-2020-16932
HIGH 7.8
Microsoft Office Microsoft Excel Office

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…
CVE-2020-16931
HIGH 7.8
Microsoft Excel Microsoft Office Office

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…
CVE-2020-16929
HIGH 7.8
Microsoft Office Microsoft Excel Office

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…
CVE-2020-9983
HIGH 8.8
iTunes Safari

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may le…
CVE-2020-9951
HIGH 8.8
iTunes Safari

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead t…
CVE-2020-17022
HIGH · vendor
Windows

Microsoft Windows Codecs Library Remote Code Execution Vulnerability
CVE-2020-16980
HIGH · vendor
Windows

Windows iSCSI Target Service Elevation of Privilege Vulnerability
CVE-2020-16976
HIGH · vendor
Windows

Windows Backup Service Elevation of Privilege Vulnerability
CVE-2020-16975
HIGH · vendor
Windows

Windows Backup Service Elevation of Privilege Vulnerability
CVE-2020-16974
HIGH · vendor
Windows

Windows Backup Service Elevation of Privilege Vulnerability
CVE-2020-16973
HIGH · vendor
Windows

Windows Backup Service Elevation of Privilege Vulnerability
CVE-2020-16972
HIGH · vendor
Windows

Windows Backup Service Elevation of Privilege Vulnerability
CVE-2020-16968
CRITICAL · vendor
Windows

Windows Camera Codec Pack Remote Code Execution Vulnerability
CVE-2020-16967
CRITICAL · vendor
Windows

Windows Camera Codec Pack Remote Code Execution Vulnerability
CVE-2020-16940
HIGH · vendor
Windows

Windows - User Profile Service Elevation of Privilege Vulnerability
CVE-2020-16939
HIGH · vendor
Windows

Group Policy Elevation of Privilege Vulnerability
CVE-2020-16938
HIGH · vendor
Windows

Windows Kernel Information Disclosure Vulnerability
CVE-2020-16936
HIGH · vendor
Windows

Windows Backup Service Elevation of Privilege Vulnerability
CVE-2020-16935
HIGH · vendor
Windows

Windows COM Server Elevation of Privilege Vulnerability
CVE-2020-16927
HIGH · vendor
Windows

Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability
CVE-2020-16924
HIGH · vendor
Windows

Jet Database Engine Remote Code Execution Vulnerability
CVE-2020-16923
CRITICAL · vendor
Windows

Microsoft Graphics Components Remote Code Execution Vulnerability
CVE-2020-16922
HIGH · vendor
Windows

Windows Spoofing Vulnerability
CVE-2020-16921
HIGH · vendor
Windows

Windows Text Services Framework Information Disclosure Vulnerability
CVE-2020-16920
HIGH · vendor
Windows

Windows Application Compatibility Client Library Elevation of Privilege Vulnerability
CVE-2020-16919
HIGH · vendor
Windows

Windows Enterprise App Management Service Information Disclosure Vulnerability
CVE-2020-16916
HIGH · vendor
Windows

Windows COM Server Elevation of Privilege Vulnerability
CVE-2020-16915
CRITICAL · vendor
Windows

Media Foundation Memory Corruption Vulnerability
CVE-2020-16914
HIGH · vendor
Windows

Windows GDI+ Information Disclosure Vulnerability
CVE-2020-16913
HIGH · vendor
Windows

Win32k Elevation of Privilege Vulnerability
CVE-2020-16912
HIGH · vendor
Windows

Windows Backup Service Elevation of Privilege Vulnerability
CVE-2020-16911
CRITICAL · vendor
Windows

GDI+ Remote Code Execution Vulnerability
CVE-2020-16910
HIGH · vendor
Windows

Windows Security Feature Bypass Vulnerability
CVE-2020-16909
HIGH · vendor
Windows

Windows Error Reporting Elevation of Privilege Vulnerability
CVE-2020-16908
HIGH · vendor
Windows

Windows Setup Elevation of Privilege Vulnerability
CVE-2020-16907
HIGH · vendor
Windows

Win32k Elevation of Privilege Vulnerability
CVE-2020-16905
HIGH · vendor
Windows

Windows Error Reporting Elevation of Privilege Vulnerability
CVE-2020-16902
HIGH · vendor
Windows

Windows Installer Elevation of Privilege Vulnerability
CVE-2020-16901
HIGH · vendor
Windows

Windows Kernel Information Disclosure Vulnerability
CVE-2020-16900
HIGH · vendor
Windows

Windows Event System Elevation of Privilege Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM