Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2020-1517
HIGH · vendor

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

CVE-2020-1516
HIGH · vendor

Windows Work Folders Service Elevation of Privilege Vulnerability

CVE-2020-1515
HIGH · vendor

Windows Telephony Server Elevation of Privilege Vulnerability

CVE-2020-1513
HIGH · vendor

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2020-1512
HIGH · vendor

Windows State Repository Service Information Disclosure Vulnerability

CVE-2020-1511
HIGH · vendor

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

CVE-2020-1510
HIGH · vendor

Win32k Information Disclosure Vulnerability

CVE-2020-1509
HIGH · vendor

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

CVE-2020-1490
HIGH · vendor

Windows Storage Service Elevation of Privilege Vulnerability

CVE-2020-1489
HIGH · vendor

Windows CSC Service Elevation of Privilege Vulnerability

CVE-2020-1488
HIGH · vendor

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

CVE-2020-1487
HIGH · vendor

Media Foundation Information Disclosure Vulnerability

CVE-2020-1486
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2020-1485
HIGH · vendor

Windows Image Acquisition Service Information Disclosure Vulnerability

CVE-2020-1484
HIGH · vendor

Windows Work Folders Service Elevation of Privilege Vulnerability

CVE-2020-1480
HIGH · vendor

Windows GDI Elevation of Privilege Vulnerability

CVE-2020-1479
HIGH · vendor

DirectX Elevation of Privilege Vulnerability

CVE-2020-1478
HIGH · vendor

Media Foundation Memory Corruption Vulnerability

CVE-2020-1475
HIGH · vendor

Windows Server Resource Management Service Elevation of Privilege Vulnerability

CVE-2020-1474
HIGH · vendor

Windows Image Acquisition Service Information Disclosure Vulnerability

CVE-2020-1473
HIGH · vendor

Jet Database Engine Remote Code Execution Vulnerability

CVE-2020-1470
HIGH · vendor

Windows Work Folders Service Elevation of Privilege Vulnerability

CVE-2020-1467
HIGH · vendor

Windows Hard Link Elevation of Privilege Vulnerability

CVE-2020-1466
HIGH · vendor

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

CVE-2020-1464
HIGH · vendor KEV

Windows Spoofing Vulnerability

CVE-2020-1459
HIGH · vendor

Windows ARM Information Disclosure Vulnerability

CVE-2020-1417
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2020-1383
HIGH · vendor

Windows RRAS Service Information Disclosure Vulnerability

CVE-2020-1378
HIGH · vendor

Windows Registry Elevation of Privilege Vulnerability

CVE-2020-1377
HIGH · vendor

Windows Registry Elevation of Privilege Vulnerability

CVE-2020-1337
HIGH · vendor

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2020-15659
HIGH 8.8

Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory c…

CVE-2020-15657
HIGH 7.8

Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files i…

CVE-2020-15656
HIGH 8.8

JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the co…

CVE-2020-6534
HIGH 8.8

Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-6533
HIGH 8.8

Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-6530
HIGH 8.8

Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension…

CVE-2020-6525
HIGH 8.8

Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-6524
HIGH 8.8

Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…

CVE-2020-6523
HIGH 8.8

Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-6520
HIGH 8.8

Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-6518
HIGH 8.8

Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potenti…

CVE-2020-6517
HIGH 8.8

Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-6515
HIGH 8.8

Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-6513
HIGH 8.8

Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVE-2020-6512
HIGH 8.8

Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-6510
HIGH 7.8

Heap buffer overflow in background fetch in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted …

CVE-2020-6507
HIGH 8.8

Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-1465
HIGH 7.8

An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker…

CVE-2020-1448
HIGH 8.8

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM