Vulnerabilities
Tracked app vulnerabilities
18,849 CVEs affect a tracked app or OS (all severities, Windows). 305 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 18,849
- Actively exploited
- 305
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-0875
HIGH · vendor
Microsoft splwow64 Information Disclosure Vulnerability |
|
CVE-2020-0870
HIGH · vendor
Shell infrastructure component Elevation of Privilege Vulnerability |
|
CVE-2020-0856
HIGH · vendor
Active Directory Information Disclosure Vulnerability |
|
CVE-2020-0839
HIGH · vendor
Windows dnsrslvr.dll Elevation of Privilege Vulnerability |
|
CVE-2020-0838
HIGH · vendor
NTFS Elevation of Privilege Vulnerability |
|
CVE-2020-0837
HIGH · vendor
ADFS MFA Elevation of Privilege Vulnerability |
|
CVE-2020-0836
HIGH · vendor
Windows DNS Denial of Service Vulnerability |
|
CVE-2020-0805
HIGH · vendor
Projected Filesystem Security Feature Bypass Vulnerability |
|
CVE-2020-0790
HIGH · vendor
Microsoft splwow64 Elevation of Privilege Vulnerability |
|
CVE-2020-0782
HIGH · vendor
Windows Cryptographic Catalog Services Elevation of Privilege Vulnerability |
|
CVE-2020-0766
HIGH · vendor
Microsoft Store Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-0761
HIGH · vendor
Active Directory Remote Code Execution Vulnerability |
|
CVE-2020-0718
HIGH · vendor
Active Directory Remote Code Execution Vulnerability |
|
CVE-2020-0664
HIGH · vendor
Active Directory Information Disclosure Vulnerability |
|
CVE-2020-0648
HIGH · vendor
Windows RSoP Service Application Elevation of Privilege Vulnerability |
|
CVE-2020-1583
HIGH 8.8
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability… |
|
CVE-2020-1574
MEDIUM 5.5
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited… |
|
CVE-2020-1569
HIGH 7.8
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way th… |
|
CVE-2020-1568
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in suc… |
|
CVE-2020-1555
HIGH 8.8
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability c… |
|
CVE-2020-1504
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successf… |
|
CVE-2020-1503
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability… |
|
CVE-2020-1498
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successf… |
|
CVE-2020-1497
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerabilit… |
|
CVE-2020-1496
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successf… |
|
CVE-2020-1495
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successf… |
|
CVE-2020-1494
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successf… |
|
CVE-2020-1493
MEDIUM 5.5
An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached fil… |
|
CVE-2020-1483
MEDIUM 5.0
A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory. An attacker who successfully ex… |
|
CVE-2020-1587
HIGH · vendor
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
|
CVE-2020-1585
CRITICAL · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2020-1584
HIGH · vendor
Windows dnsrslvr.dll Elevation of Privilege Vulnerability |
|
CVE-2020-1579
HIGH · vendor
Windows Function Discovery SSDP Provider Elevation of Privilege Vulnerability |
|
CVE-2020-1578
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2020-1577
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2020-1571
HIGH · vendor
Windows Setup Elevation of Privilege Vulnerability |
|
CVE-2020-1566
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-1565
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-1564
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-1562
HIGH · vendor
Microsoft Graphics Components Remote Code Execution Vulnerability |
|
CVE-2020-1561
HIGH · vendor
Microsoft Graphics Components Remote Code Execution Vulnerability |
|
CVE-2020-1560
CRITICAL · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2020-1558
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-1557
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-1556
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2020-1554
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1553
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1552
HIGH · vendor
Windows Work Folder Service Elevation of Privilege Vulnerability |
|
CVE-2020-1551
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-1550
HIGH · vendor
Windows CDP User Components Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.