Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-16015
HIGH 8.8
Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
|
CVE-2020-16013
HIGH 8.8
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2020-26664
HIGH 7.8
A vulnerability in EbmlTypeDispatcher::send in VideoLAN VLC media player 3.0.11 allows attackers to trigger a heap-based buffer overflow via a crafted .mkv fil… |
|
CVE-2020-35113
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presu… |
|
CVE-2020-35112
HIGH 8.8
If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads d… |
|
CVE-2020-26974
HIGH 8.8
When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the wrong type. This resulted in a heap user-af… |
|
CVE-2020-26973
HIGH 8.8
Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass. This vulnerab… |
|
CVE-2020-26971
HIGH 8.8
Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. This vulnerability affects Fire… |
|
CVE-2020-17129
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17128
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17127
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17125
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17124
HIGH 7.8
Microsoft PowerPoint Remote Code Execution Vulnerability |
|
CVE-2020-17123
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-26970
HIGH 8.8
When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on p… |
|
CVE-2020-26968
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption and we presu… |
|
CVE-2020-26960
HIGH 8.8
If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free… |
|
CVE-2020-26959
HIGH 8.8
During browser shutdown, reference decrementing could have occured on a previously freed object, resulting in a use-after-free, memory corruption, and a potent… |
|
CVE-2020-26950
HIGH 8.8
In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerab… |
|
CVE-2020-9999
HIGH 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a m… |
|
CVE-2020-17140
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2020-17139
HIGH · vendor
Windows Overlay Filter Security Feature Bypass Vulnerability |
|
CVE-2020-17138
HIGH · vendor
Windows Error Reporting Information Disclosure Vulnerability |
|
CVE-2020-17137
HIGH · vendor
DirectX Graphics Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-17136
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2020-17134
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2020-17103
HIGH · vendor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
|
CVE-2020-17099
HIGH · vendor
Windows Lock Screen Security Feature Bypass Vulnerability |
|
CVE-2020-17098
HIGH · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2020-17097
HIGH · vendor
Windows Digital Media Receiver Elevation of Privilege Vulnerability |
|
CVE-2020-17096
HIGH · vendor
Windows NTFS Remote Code Execution Vulnerability |
|
CVE-2020-17094
HIGH · vendor
Windows Error Reporting Information Disclosure Vulnerability |
|
CVE-2020-17092
HIGH · vendor
Windows Network Connections Service Elevation of Privilege Vulnerability |
|
CVE-2020-16996
HIGH · vendor
Kerberos Security Feature Bypass Vulnerability |
|
CVE-2020-16964
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16963
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16962
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16961
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16960
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16959
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-16958
HIGH · vendor
Windows Backup Engine Elevation of Privilege Vulnerability |
|
CVE-2020-17091
HIGH 7.8
Microsoft Teams Remote Code Execution Vulnerability |
|
CVE-2020-17067
HIGH 7.8
Microsoft Excel Security Feature Bypass Vulnerability |
|
CVE-2020-17066
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17065
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17064
HIGH 7.8
Microsoft Excel Remote Code Execution Vulnerability |
|
CVE-2020-17058
HIGH 7.5
Microsoft Browser Memory Corruption Vulnerability |
|
CVE-2020-17052
HIGH 7.5
Scripting Engine Memory Corruption Vulnerability |
|
CVE-2020-17113
HIGH · vendor
Windows Camera Codec Information Disclosure Vulnerability |
|
CVE-2020-17090
HIGH · vendor
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.