Vulnerabilities

Tracked app vulnerabilities

8,456 CVEs affect a tracked app or OS (all severities, Windows). 213 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 8,456
Actively exploited: 213
Publication window: 2002-10-04 → 2026-08-19

All CVEs 8,456 CISA KEV 213 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

8,456 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2019-0901 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0900 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0899 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0898 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0897 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0896 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0895 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0894 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0893 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0892 HIGH 7.8 2019-05-14 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0891 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0890 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0889 HIGH 7.8 2019-05-14 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0886 HIGH 5.5 2019-05-14 Windows Hyper-V Information Disclosure Vulnerability	HIGH 5.5	—	—	2019-05-14
CVE-2019-0885 HIGH 7.8 2019-05-14 Windows OLE Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0882 HIGH 4.7 2019-05-14 Windows GDI Information Disclosure Vulnerability	HIGH 4.7	—	—	2019-05-14
CVE-2019-0881 HIGH 8.8 2019-05-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 8.8	—	—	2019-05-14
CVE-2019-0863 HIGH 7.8 KEV 2019-05-14 Windows Error Reporting Elevation of Privilege Vulnerability	HIGH 7.8	KEV	—	2019-05-14
CVE-2019-0758 HIGH 4.7 2019-05-14 Windows GDI Information Disclosure Vulnerability	HIGH 4.7	—	—	2019-05-14
CVE-2019-0734 HIGH 7.8 2019-05-14 Windows Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-05-14
CVE-2019-0733 HIGH 5.3 2019-05-14 Windows Defender Application Control Security Feature Bypass Vulnerability	HIGH 5.3	—	—	2019-05-14
CVE-2019-0727 HIGH 6.7 2019-05-14 Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability	HIGH 6.7	—	—	2019-05-14
CVE-2019-0725 CRITICAL 8.1 2019-05-14 Windows DHCP Server Remote Code Execution Vulnerability	CRITICAL 8.1	—	—	2019-05-14
CVE-2019-0707 HIGH 7.0 2019-05-14 Windows NDIS Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2019-05-14
CVE-2018-18524 MEDIUM 6.1 1 app 2019-05-13 Evernote 6.15 on Windows has an incorrectly repaired stored XSS vulnerability. An attacker can use this XSS issue to inject Node.js code under Present mode. Af…	MEDIUM 6.1	—	Evernote	2019-05-13
CVE-2019-9813 HIGH 8.8 1 app 2019-04-26 Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulne…	HIGH 8.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9810 HIGH 8.8 1 app 2019-04-26 Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerabili…	HIGH 8.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9801 MEDIUM 5.3 1 app 2019-04-26 Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows o…	MEDIUM 5.3	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9796 CRITICAL 9.8 1 app 2019-04-26 A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration…	CRITICAL 9.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9795 CRITICAL 9.8 1 app 2019-04-26 A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious JavaScript to trigger a potentially ex…	CRITICAL 9.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9794 CRITICAL 9.8 1 app 2019-04-26 A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This cou…	CRITICAL 9.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9793 MEDIUM 5.9 1 app 2019-04-26 A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. This vulnera…	MEDIUM 5.9	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9792 CRITICAL 9.8 1 app 2019-04-26 The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout. This magic value can then b…	CRITICAL 9.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9791 CRITICAL 9.8 1 app 2019-04-26 The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just…	CRITICAL 9.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9790 CRITICAL 9.8 1 app 2019-04-26 A use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still…	CRITICAL 9.8	—	Mozilla Thunderbird	2019-04-26
CVE-2019-9788 CRITICAL 9.8 1 app 2019-04-26 Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. Some of these bugs showed e…	CRITICAL 9.8	—	Mozilla Thunderbird	2019-04-26
CVE-2018-18513 HIGH 7.5 1 app 2019-04-26 A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature. This can be used as a denial-of-service (DOS) atta…	HIGH 7.5	—	Mozilla Thunderbird	2019-04-26
CVE-2018-18512 CRITICAL 9.8 1 app 2019-04-26 A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although th…	CRITICAL 9.8	—	Mozilla Thunderbird	2019-04-26
CVE-2018-18509 MEDIUM 5.3 1 app 2019-04-26 A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even if the shown message…	MEDIUM 5.3	—	Mozilla Thunderbird	2019-04-26
CVE-2019-0879 HIGH 7.8 2019-04-09 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-04-09
CVE-2019-0877 HIGH 7.8 2019-04-09 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-04-09
CVE-2019-0859 HIGH 7.8 KEV 2019-04-09 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	KEV	—	2019-04-09
CVE-2019-0856 HIGH 6.6 2019-04-09 Windows Remote Code Execution Vulnerability	HIGH 6.6	—	—	2019-04-09
CVE-2019-0853 CRITICAL 7.8 2019-04-09 GDI+ Remote Code Execution Vulnerability	CRITICAL 7.8	—	—	2019-04-09
CVE-2019-0851 HIGH 7.8 2019-04-09 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-04-09
CVE-2019-0849 HIGH 4.7 2019-04-09 Windows GDI Information Disclosure Vulnerability	HIGH 4.7	—	—	2019-04-09
CVE-2019-0848 HIGH 4.7 2019-04-09 Win32k Information Disclosure Vulnerability	HIGH 4.7	—	—	2019-04-09
CVE-2019-0847 HIGH 7.8 2019-04-09 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-04-09
CVE-2019-0846 HIGH 7.8 2019-04-09 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-04-09
CVE-2019-0845 CRITICAL 7.5 2019-04-09 Windows IOleCvt Interface Remote Code Execution Vulnerability	CRITICAL 7.5	—	—	2019-04-09