Vulnerabilities

Tracked app vulnerabilities

18,849 CVEs affect a tracked app or OS (all severities, Windows). 305 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 18,849
Actively exploited: 305
Publication window: 2004-07-27 → 2026-11-11

All CVEs 18,849 CISA KEV 305 Public exploit 428 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

18,849 entries Windows Hide N/A Clear all

CVE	Severity	KEV	Apps	Published
CVE-2020-6551 HIGH 8.8 2020-09-21 Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-09-21
CVE-2020-6550 HIGH 8.8 2020-09-21 Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-09-21
CVE-2020-6549 HIGH 8.8 2020-09-21 Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-09-21
CVE-2020-6548 HIGH 8.8 2020-09-21 Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the renderer process to potentially exploit …	HIGH 8.8	—		2020-09-21
CVE-2020-6547 MEDIUM 6.5 2020-09-21 Incorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML…	MEDIUM 6.5	—		2020-09-21
CVE-2020-6546 HIGH 7.8 2020-09-21 Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted files…	HIGH 7.8	—		2020-09-21
CVE-2020-6545 HIGH 8.8 2020-09-21 Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-09-21
CVE-2020-6544 HIGH 8.8 2020-09-21 Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-09-21
CVE-2020-6543 HIGH 8.8 2020-09-21 Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	HIGH 8.8	—		2020-09-21
CVE-2020-6542 HIGH 8.8 2020-09-21 Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-09-21
CVE-2020-6541 HIGH 8.8 2020-09-21 Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-09-21
CVE-2020-6540 HIGH 8.8 2020-09-21 Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-09-21
CVE-2020-6539 HIGH 8.8 2020-09-21 Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-09-21
CVE-2020-6538 MEDIUM 6.5 2020-09-21 Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HT…	MEDIUM 6.5	—		2020-09-21
CVE-2020-6537 HIGH 8.8 2020-09-21 Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.	HIGH 8.8	—		2020-09-21
CVE-2020-6532 HIGH 8.8 2020-09-21 Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2020-09-21
CVE-2020-15966 MEDIUM 4.3 2020-09-21 Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension…	MEDIUM 4.3	—		2020-09-21
CVE-2020-15965 HIGH 8.8 2020-09-21 Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pa…	HIGH 8.8	—		2020-09-21
CVE-2020-15964 HIGH 8.8 2020-09-21 Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…	HIGH 8.8	—		2020-09-21
CVE-2020-15963 CRITICAL 9.6 2020-09-21 Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension…	CRITICAL 9.6	—		2020-09-21
CVE-2020-15962 HIGH 8.8 2020-09-21 Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access v…	HIGH 8.8	—		2020-09-21
CVE-2020-15961 CRITICAL 9.6 2020-09-21 Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension …	CRITICAL 9.6	—		2020-09-21
CVE-2020-15960 HIGH 8.8 2020-09-21 Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a craf…	HIGH 8.8	—		2020-09-21
CVE-2020-15959 MEDIUM 4.3 2020-09-21 Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain po…	MEDIUM 4.3	—		2020-09-21
CVE-2020-1594 HIGH 7.8 2020-09-11 <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…	HIGH 7.8	—		2020-09-11
CVE-2020-1335 HIGH 7.8 2020-09-11 <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…	HIGH 7.8	—		2020-09-11
CVE-2020-1332 HIGH 7.8 2020-09-11 <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…	HIGH 7.8	—		2020-09-11
CVE-2020-1224 MEDIUM 5.5 2020-09-11 <p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerabi…	MEDIUM 5.5	—		2020-09-11
CVE-2020-1218 HIGH 7.8 2020-09-11 <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exp…	HIGH 7.8	—		2020-09-11
CVE-2020-1180 MEDIUM 4.2 Microsoft Edge 2020-09-11 <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memo…	MEDIUM 4.2	—	Microsoft Edge	2020-09-11
CVE-2020-1172 MEDIUM 4.2 Microsoft Edge 2020-09-11 <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memo…	MEDIUM 4.2	—	Microsoft Edge	2020-09-11
CVE-2020-1057 MEDIUM 4.2 Microsoft Edge 2020-09-11 <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memo…	MEDIUM 4.2	—	Microsoft Edge	2020-09-11
CVE-2020-16884 MEDIUM 4.2 Microsoft Edge 2020-09-11 <p>A remote code execution vulnerability exists in the way that the IEToEdge Browser Helper Object (BHO) plugin on Internet Explorer handles objects in memory.…	MEDIUM 4.2	—	Microsoft Edge	2020-09-11
CVE-2020-16853 HIGH 7.1 Microsoft OneDrive 2020-09-11 <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf…	HIGH 7.1	—	Microsoft OneDrive	2020-09-11
CVE-2020-16852 HIGH 7.1 Microsoft OneDrive 2020-09-11 <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf…	HIGH 7.1	—	Microsoft OneDrive	2020-09-11
CVE-2020-16851 HIGH 7.1 Microsoft OneDrive 2020-09-11 <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf…	HIGH 7.1	—	Microsoft OneDrive	2020-09-11
CVE-2020-0878 MEDIUM 4.2 KEV Microsoft Edge 2020-09-11 <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way th…	MEDIUM 4.2	KEV	Microsoft Edge	2020-09-11
CVE-2020-16879 HIGH · vendor Windows 2020-09-08 Projected Filesystem Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2020-09-08
CVE-2020-16854 HIGH · vendor Windows 2020-09-08 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2020-09-08
CVE-2020-1598 HIGH · vendor Windows 2020-09-08 Windows UPnP Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2020-09-08
CVE-2020-1596 HIGH · vendor Windows 2020-09-08 TLS Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2020-09-08
CVE-2020-1593 CRITICAL · vendor Windows 2020-09-08 Windows Media Audio Decoder Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-09-08
CVE-2020-1592 HIGH · vendor Windows 2020-09-08 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2020-09-08
CVE-2020-1590 HIGH · vendor Windows 2020-09-08 Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2020-09-08
CVE-2020-1589 HIGH · vendor Windows 2020-09-08 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2020-09-08
CVE-2020-1559 HIGH · vendor Windows 2020-09-08 Windows Storage Services Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2020-09-08
CVE-2020-1532 HIGH · vendor Windows 2020-09-08 Windows InstallService Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2020-09-08
CVE-2020-1508 CRITICAL · vendor Windows 2020-09-08 Windows Media Audio Decoder Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2020-09-08
CVE-2020-1507 HIGH · vendor Windows 2020-09-08 Microsoft COM for Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2020-09-08
CVE-2020-1491 HIGH · vendor Windows 2020-09-08 Windows Function Discovery Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2020-09-08

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM