Vulnerabilities
Tracked app vulnerabilities
2,726 CVEs affect a tracked app or OS (Critical, all platforms). 48 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 2,726
- Actively exploited
- 48
- Publication window
- 2007-08-28 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-10628
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-1585
CRITICAL · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2020-1560
CRITICAL · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2020-1554
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1525
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1492
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1477
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability |
|
CVE-2020-1379
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1339
CRITICAL · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2020-3667
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-3619
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-11116
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-13998
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-10615
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-10562
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-6522
CRITICAL 9.6
Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox es… |
|
CVE-2020-6509
CRITICAL 9.6
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially p… |
|
CVE-2020-6505
CRITICAL 9.6
Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
|
CVE-2020-15801
CRITICAL 9.8
In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name… |
|
CVE-2020-1436
CRITICAL · vendor
Windows Font Library Remote Code Execution Vulnerability |
|
CVE-2020-1435
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-1421
CRITICAL · vendor
LNK Remote Code Execution Vulnerability |
|
CVE-2020-1410
CRITICAL · vendor
Windows Address Book Remote Code Execution Vulnerability |
|
CVE-2020-1409
CRITICAL · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2020-1374
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2020-1350
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2020-1043
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1042
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1041
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1040
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1036
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1032
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-9589
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-3699
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-3698
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0225
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0224
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-9502
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-9501
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-1425
CRITICAL · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2020-1300
CRITICAL · vendor
Windows Remote Code Execution Vulnerability |
|
CVE-2020-1299
CRITICAL · vendor
LNK Remote Code Execution Vulnerability |
|
CVE-2020-1286
CRITICAL · vendor
Windows Shell Remote Code Execution Vulnerability |
|
CVE-2020-1281
CRITICAL · vendor
Windows OLE Remote Code Execution Vulnerability |
|
CVE-2020-1248
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-6109
CRITICAL 9.8
An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat mess… |
|
CVE-2020-6493
CRITICAL 9.6
Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially pe… |
|
CVE-2020-0117
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14080
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.