Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-1381
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2020-1375
HIGH · vendor
Windows COM Server Elevation of Privilege Vulnerability |
|
CVE-2020-1373
HIGH · vendor
Windows Network Connections Service Elevation of Privilege Vulnerability |
|
CVE-2020-1372
HIGH · vendor
Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability |
|
CVE-2020-1371
HIGH · vendor
Windows Event Logging Service Elevation of Privilege Vulnerability |
|
CVE-2020-1370
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1369
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2020-1368
HIGH · vendor
Windows Credential Enrollment Manager Service Elevation of Privilege Vulnerability |
|
CVE-2020-1367
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2020-1366
HIGH · vendor
Windows Print Workflow Service Elevation of Privilege Vulnerability |
|
CVE-2020-1365
HIGH · vendor
Windows Event Logging Service Elevation of Privilege Vulnerability |
|
CVE-2020-1364
HIGH · vendor
Windows WalletService Denial of Service Vulnerability |
|
CVE-2020-1363
HIGH · vendor
Windows Picker Platform Elevation of Privilege Vulnerability |
|
CVE-2020-1362
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2020-1361
HIGH · vendor
Windows WalletService Information Disclosure Vulnerability |
|
CVE-2020-1360
HIGH · vendor
Windows Profile Service Elevation of Privilege Vulnerability |
|
CVE-2020-1359
HIGH · vendor
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
|
CVE-2020-1358
HIGH · vendor
Windows Resource Policy Information Disclosure Vulnerability |
|
CVE-2020-1357
HIGH · vendor
Windows System Events Broker Elevation of Privilege Vulnerability |
|
CVE-2020-1356
HIGH · vendor
Windows iSCSI Target Service Elevation of Privilege Vulnerability |
|
CVE-2020-1355
HIGH · vendor
Windows Font Driver Host Remote Code Execution Vulnerability |
|
CVE-2020-1354
HIGH · vendor
Windows UPnP Device Host Elevation of Privilege Vulnerability |
|
CVE-2020-1353
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1352
HIGH · vendor
Windows USO Core Worker Elevation of Privilege Vulnerability |
|
CVE-2020-1351
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-1347
HIGH · vendor
Windows Storage Services Elevation of Privilege Vulnerability |
|
CVE-2020-1346
HIGH · vendor
Windows Modules Installer Elevation of Privilege Vulnerability |
|
CVE-2020-1344
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2020-1336
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-1333
HIGH · vendor
Group Policy Services Policy Processing Elevation of Privilege Vulnerability |
|
CVE-2020-1330
HIGH · vendor
Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability |
|
CVE-2020-1267
HIGH · vendor
Local Security Authority Subsystem Service Denial of Service Vulnerability |
|
CVE-2020-1249
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1085
HIGH · vendor
Windows Function Discovery Service Elevation of Privilege Vulnerability |
|
CVE-2019-20907
HIGH 7.5
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pa… |
|
CVE-2020-12420
HIGH 8.8
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially explo… |
|
CVE-2020-12419
HIGH 8.8
When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This c… |
|
CVE-2020-12417
HIGH 8.8
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitab… |
|
CVE-2020-12406
HIGH 8.8
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it… |
|
CVE-2020-12398
HIGH 7.5
If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted co… |
|
CVE-2018-12371
HIGH 8.8
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the … |
|
CVE-2020-15523
HIGH 7.8
In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases wh… |
|
CVE-2020-1226
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2020-1225
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2020-1219
HIGH 7.5
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerabilit… |
|
CVE-2020-1073
HIGH 8.1
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-1457
HIGH · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2020-1441
HIGH · vendor
Windows Spatial Data Service Elevation of Privilege Vulnerability |
|
CVE-2020-1348
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2020-1334
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.