Vulnerabilities

Tracked app vulnerabilities

844 entries

All CVEs 16,390 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2017-0143 CRITICAL 8.1 KEV 2017-03-14 Windows SMB Remote Code Execution Vulnerability	CRITICAL 8.1	—	KEV	—	2017-03-14	Windows SMB Remote Code Execution Vulnerability
CVE-2017-0109 CRITICAL 7.6 2017-03-14 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL 7.6	—	—	—	2017-03-14	Windows Hyper-V Remote Code Execution Vulnerability
CVE-2017-0104 CRITICAL 8.1 2017-03-14 iSNS Server Memory Corruption Vulnerability	CRITICAL 8.1	—	—	—	2017-03-14	iSNS Server Memory Corruption Vulnerability
CVE-2017-0084 CRITICAL 8.8 2017-03-14 Windows Uniscribe Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2017-03-14	Windows Uniscribe Remote Code Execution Vulnerability
CVE-2017-0075 CRITICAL 7.6 2017-03-14 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL 7.6	—	—	—	2017-03-14	Windows Hyper-V Remote Code Execution Vulnerability
CVE-2017-0021 CRITICAL 4.3 2017-03-14 Hyper-V vSMB Remote Code Execution Vulnerability	CRITICAL 4.3	—	—	—	2017-03-14	Hyper-V vSMB Remote Code Execution Vulnerability
CVE-2017-0014 CRITICAL 7.5 2017-03-14 Windows Graphics Component Remote Code Execution Vulnerability	CRITICAL 7.5	—	—	—	2017-03-14	Windows Graphics Component Remote Code Execution Vulnerability
CVE-2016-7274 CRITICAL 7.5 2016-12-13 Windows Uniscribe Remote Code Execution Vulnerability	CRITICAL 7.5	—	—	—	2016-12-13	Windows Uniscribe Remote Code Execution Vulnerability
CVE-2016-7273 CRITICAL 4.2 2016-12-13 Windows Graphics Component Remote Code Execution Vulnerability	CRITICAL 4.2	—	—	—	2016-12-13	Windows Graphics Component Remote Code Execution Vulnerability
CVE-2016-7272 CRITICAL 7.5 2016-12-13 Windows Graphics Component Remote Code Execution Vulnerability	CRITICAL 7.5	—	—	—	2016-12-13	Windows Graphics Component Remote Code Execution Vulnerability
CVE-2016-9535 CRITICAL 9.8 Network 2016-11-22 tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when d…	CRITICAL 9.8	Network	—	—	2016-11-22	tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when d…
CVE-2016-7256 CRITICAL 8.8 KEV 2016-11-08 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL 8.8	—	KEV	—	2016-11-08	Microsoft Graphics Remote Code Execution Vulnerability
CVE-2016-7248 CRITICAL 2016-11-08 Microsoft Video Control Remote Code Execution Vulnerability	CRITICAL	—	—	—	2016-11-08	Microsoft Video Control Remote Code Execution Vulnerability
CVE-2016-7212 CRITICAL 8.8 2016-11-08 Windows Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2016-11-08	Windows Remote Code Execution Vulnerability
CVE-2016-7205 CRITICAL 7.1 2016-11-08 Windows Animation Manager Memory Corruption Vulnerability	CRITICAL 7.1	—	—	—	2016-11-08	Windows Animation Manager Memory Corruption Vulnerability
CVE-2016-3396 CRITICAL 2016-10-11 GDI+ Remote Code Execution Vulnerability	CRITICAL	—	—	—	2016-10-11	GDI+ Remote Code Execution Vulnerability
CVE-2016-3393 CRITICAL 8.8 KEV 2016-10-11 GDI+ Remote Code Execution Vulnerability	CRITICAL 8.8	—	KEV	—	2016-10-11	GDI+ Remote Code Execution Vulnerability
CVE-2016-0142 CRITICAL 2016-10-11 Microsoft Video Control Remote Code Execution Vulnerability	CRITICAL	—	—	—	2016-10-11	Microsoft Video Control Remote Code Execution Vulnerability
CVE-2016-3375 CRITICAL 7.5 2016-09-13 Scripting Engine Memory Corruption Vulnerability	CRITICAL 7.5	—	—	—	2016-09-13	Scripting Engine Memory Corruption Vulnerability
CVE-2016-3356 CRITICAL 6.7 2016-09-13 GDI+ Remote Code Execution Vulnerability	CRITICAL 6.7	—	—	—	2016-09-13	GDI+ Remote Code Execution Vulnerability
CVE-2016-5636 CRITICAL 9.8 Network 1 apps 2016-09-02 Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attacker…	CRITICAL 9.8	Network	—	1	2016-09-02	Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attacker…
CVE-2016-3301 CRITICAL 8.8 2016-08-09 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2016-08-09	Microsoft Graphics Remote Code Execution Vulnerability
CVE-2016-3238 CRITICAL 8.8 2016-07-12 Windows Print Spooler Remote Code Execution Vulnerability	CRITICAL 8.8	—	—	—	2016-07-12	Windows Print Spooler Remote Code Execution Vulnerability
CVE-2016-3236 CRITICAL 9.8 Network 2016-06-16 The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Win…	CRITICAL 9.8	Network	—	—	2016-06-16	The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Win…
CVE-2016-2324 CRITICAL 9.8 Network 1 apps 2016-04-08 Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-…	CRITICAL 9.8	Network	—	1	2016-04-08	Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-…
CVE-2016-2315 CRITICAL 9.8 Network 1 apps 2016-04-08 revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many…	CRITICAL 9.8	Network	—	1	2016-04-08	revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many…
CVE-2014-1532 CRITICAL 9.8 Network 1 apps 2014-04-30 Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24…	CRITICAL 9.8	Network	—	1	2014-04-30	Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24…
CVE-2014-1524 CRITICAL 9.8 Network 1 apps 2014-04-30 The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before …	CRITICAL 9.8	Network	—	1	2014-04-30	The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before …
CVE-2014-1514 CRITICAL 9.8 Network 1 apps 2014-03-19 vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the l…	CRITICAL 9.8	Network	—	1	2014-03-19	vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the l…
CVE-2014-1511 CRITICAL 9.8 Network 1 apps 2014-03-19 Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocke…	CRITICAL 9.8	Network	—	1	2014-03-19	Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocke…
CVE-2014-1510 CRITICAL 9.8 Network 1 apps 2014-03-19 The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attac…	CRITICAL 9.8	Network	—	1	2014-03-19	The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attac…
CVE-2014-1508 CRITICAL 9.1 Network 1 apps 2014-03-19 The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 all…	CRITICAL 9.1	Network	—	1	2014-03-19	The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 all…
CVE-2014-1493 CRITICAL 9.8 Network 1 apps 2014-03-19 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey…	CRITICAL 9.8	Network	—	1	2014-03-19	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey…
CVE-2014-1486 CRITICAL 9.8 Network 1 apps 2014-02-06 Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonk…	CRITICAL 9.8	Network	—	1	2014-02-06	Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonk…
CVE-2014-1477 CRITICAL 9.8 Network 1 apps 2014-02-06 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey…	CRITICAL 9.8	Network	—	1	2014-02-06	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey…
CVE-2013-6671 CRITICAL 9.8 Network 1 apps 2013-12-11 The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allo…	CRITICAL 9.8	Network	—	1	2013-12-11	The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allo…
CVE-2013-5618 CRITICAL 9.8 Network 1 apps 2013-12-11 Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.…	CRITICAL 9.8	Network	—	1	2013-12-11	Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.…
CVE-2013-5616 CRITICAL 9.8 Network 1 apps 2013-12-11 Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbi…	CRITICAL 9.8	Network	—	1	2013-12-11	Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbi…
CVE-2013-5615 CRITICAL 9.8 Network 1 apps 2013-12-11 The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properl…	CRITICAL 9.8	Network	—	1	2013-12-11	The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properl…
CVE-2013-5613 CRITICAL 9.8 Network 1 apps 2013-12-11 Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before…	CRITICAL 9.8	Network	—	1	2013-12-11	Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before…
CVE-2013-5609 CRITICAL 9.8 Network 1 apps 2013-12-11 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey…	CRITICAL 9.8	Network	—	1	2013-12-11	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey…
CVE-2010-3765 CRITICAL 9.8 KEV Network 1 apps 2010-10-28 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when Ja…	CRITICAL 9.8	Network	KEV	1	2010-10-28	Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when Ja…
CVE-2010-1205 CRITICAL 9.8 Network 1 apps 2010-06-30 Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbi…	CRITICAL 9.8	Network	—	1	2010-06-30	Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbi…
CVE-2007-4559 CRITICAL 9.8 Network 1 apps 2007-08-28 Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to over…	CRITICAL 9.8	Network	—	1	2007-08-28	Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to over…