Vulnerabilities

Tracked app vulnerabilities

11,275 CVEs affect a tracked app or OS (High, all platforms). 229 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 11,275
Actively exploited: 229
Publication window: 2010-07-30 → 2026-08-19

All CVEs 11,275 CISA KEV 229 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

11,275 entries High Clear all

CVE	Severity	KEV	Apps	Published
CVE-2019-2110 HIGH 2019-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2019-10-01
CVE-2019-10535 HIGH 2019-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2019-10-01
CVE-2019-10490 HIGH 2019-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2019-10-01
CVE-2018-19824 HIGH 2019-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2019-10-01
CVE-2018-11902 HIGH 2019-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	2019-10-01
CVE-2019-17051 HIGH 7.8 1 app 2019-09-30 Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-cl…	HIGH 7.8	—	Evernote	2019-09-30
CVE-2019-11927 HIGH 7.8 2 apps 2019-09-27 An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags …	HIGH 7.8	—	2	2019-09-27
CVE-2019-11755 HIGH 7.5 1 app 2019-09-27 A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the sign…	HIGH 7.5	—	Mozilla Thunderbird	2019-09-27
CVE-2019-11752 HIGH 8.8 1 app 2019-09-27 It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploi…	HIGH 8.8	—	Mozilla Thunderbird	2019-09-27
CVE-2019-11746 HIGH 8.8 1 app 2019-09-27 A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable c…	HIGH 8.8	—	Mozilla Thunderbird	2019-09-27
CVE-2019-11740 HIGH 8.8 1 app 2019-09-27 Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these bugs showed evidenc…	HIGH 8.8	—	Mozilla Thunderbird	2019-09-27
CVE-2019-1303 HIGH 2019-09-10 Windows Elevation of Privilege Vulnerability	HIGH	—	—	2019-09-10
CVE-2019-1294 HIGH 5.3 2019-09-10 Windows Secure Boot Security Feature Bypass Vulnerability	HIGH 5.3	—	—	2019-09-10
CVE-2019-1293 HIGH 5.5 2019-09-10 Windows SMB Client Driver Information Disclosure Vulnerability	HIGH 5.5	—	—	2019-09-10
CVE-2019-1292 HIGH 7.8 2019-09-10 Windows Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1289 HIGH 7.0 2019-09-10 Windows Update Delivery Optimization Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2019-09-10
CVE-2019-1287 HIGH 7.8 2019-09-10 Windows Network Connectivity Assistant Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1286 HIGH 5.5 2019-09-10 Windows GDI Information Disclosure Vulnerability	HIGH 5.5	—	—	2019-09-10
CVE-2019-1285 HIGH 7.8 2019-09-10 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1282 HIGH 5.5 2019-09-10 Windows Common Log File System Driver Information Disclosure Vulnerability	HIGH 5.5	—	—	2019-09-10
CVE-2019-1278 HIGH 7.8 2019-09-10 Windows Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1277 HIGH 7.8 2019-09-10 Windows Audio Service Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1274 HIGH 6.3 2019-09-10 Windows Kernel Information Disclosure Vulnerability	HIGH 6.3	—	—	2019-09-10
CVE-2019-1273 HIGH 8.2 2019-09-10 Active Directory Federation Services XSS Vulnerability	HIGH 8.2	—	—	2019-09-10
CVE-2019-1272 HIGH 6.3 2019-09-10 Windows Data Sharing Service Elevation of Privilege Vulnerability	HIGH 6.3	—	—	2019-09-10
CVE-2019-1271 HIGH 7.0 2019-09-10 Windows Media Elevation of Privilege Vulnerability	HIGH 7.0	—	—	2019-09-10
CVE-2019-1270 HIGH 6.3 2019-09-10 Microsoft Windows Store Installer Elevation of Privilege Vulnerability	HIGH 6.3	—	—	2019-09-10
CVE-2019-1269 HIGH 6.3 2019-09-10 Windows ALPC Elevation of Privilege Vulnerability	HIGH 6.3	—	—	2019-09-10
CVE-2019-1268 HIGH 6.5 2019-09-10 Winlogon Elevation of Privilege Vulnerability	HIGH 6.5	—	—	2019-09-10
CVE-2019-1267 HIGH 7.3 2019-09-10 Microsoft Compatibility Appraiser Elevation of Privilege Vulnerability	HIGH 7.3	—	—	2019-09-10
CVE-2019-1256 HIGH 7.8 2019-09-10 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1254 HIGH 5.5 2019-09-10 Windows Hyper-V Information Disclosure Vulnerability	HIGH 5.5	—	—	2019-09-10
CVE-2019-1253 HIGH 7.8 KEV 2019-09-10 Windows Elevation of Privilege Vulnerability	HIGH 7.8	KEV	—	2019-09-10
CVE-2019-1252 HIGH 5.5 2019-09-10 Windows GDI Information Disclosure Vulnerability	HIGH 5.5	—	—	2019-09-10
CVE-2019-1251 HIGH 5.5 2019-09-10 DirectWrite Information Disclosure Vulnerability	HIGH 5.5	—	—	2019-09-10
CVE-2019-1250 HIGH 7.8 2019-09-10 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1249 HIGH 7.8 2019-09-10 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1248 HIGH 7.8 2019-09-10 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1247 HIGH 7.8 2019-09-10 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1246 HIGH 7.8 2019-09-10 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1245 HIGH 6.5 2019-09-10 DirectWrite Information Disclosure Vulnerability	HIGH 6.5	—	—	2019-09-10
CVE-2019-1244 HIGH 6.5 2019-09-10 DirectWrite Information Disclosure Vulnerability	HIGH 6.5	—	—	2019-09-10
CVE-2019-1243 HIGH 7.8 2019-09-10 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1242 HIGH 7.8 2019-09-10 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1241 HIGH 7.8 2019-09-10 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1240 HIGH 7.8 2019-09-10 Jet Database Engine Remote Code Execution Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1235 HIGH 7.8 2019-09-10 Windows Text Service Framework Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1232 HIGH 7.8 2019-09-10 Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability	HIGH 7.8	—	—	2019-09-10
CVE-2019-1219 HIGH 5.5 2019-09-10 Windows Transaction Manager Information Disclosure Vulnerability	HIGH 5.5	—	—	2019-09-10
CVE-2019-1216 HIGH 5.5 2019-09-10 DirectX Information Disclosure Vulnerability	HIGH 5.5	—	—	2019-09-10