Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-1251
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-1247
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-1246
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-1244
HIGH · vendor
Connected User Experiences and Telemetry Service Denial of Service Vulnerability |
|
CVE-2020-1241
HIGH · vendor
Windows Kernel Security Feature Bypass Vulnerability |
|
CVE-2020-1239
HIGH · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1238
HIGH · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1237
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-1236
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-1235
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1234
HIGH · vendor
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2020-1233
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1232
HIGH · vendor
Media Foundation Information Disclosure Vulnerability |
|
CVE-2020-1231
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1222
HIGH · vendor
Microsoft Store Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1217
HIGH · vendor
Windows Runtime Information Disclosure Vulnerability |
|
CVE-2020-1212
HIGH · vendor
OLE Automation Elevation of Privilege Vulnerability |
|
CVE-2020-1211
HIGH · vendor
Connected Devices Platform Service Elevation of Privilege Vulnerability |
|
CVE-2020-1209
HIGH · vendor
Windows Network List Service Elevation of Privilege Vulnerability |
|
CVE-2020-1208
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-1207
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-1206
HIGH · vendor
Windows SMBv3 Client/Server Information Disclosure Vulnerability |
|
CVE-2020-1204
HIGH · vendor
Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability |
|
CVE-2020-1203
HIGH · vendor
Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability |
|
CVE-2020-1202
HIGH · vendor
Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability |
|
CVE-2020-1201
HIGH · vendor
Windows Now Playing Session Manager Elevation of Privilege Vulnerability |
|
CVE-2020-1199
HIGH · vendor
Windows Feedback Hub Elevation of Privilege Vulnerability |
|
CVE-2020-1197
HIGH · vendor
Windows Error Reporting Manager Elevation of Privilege Vulnerability |
|
CVE-2020-1196
HIGH · vendor
Windows Print Configuration Elevation of Privilege Vulnerability |
|
CVE-2020-1194
HIGH · vendor
Windows Registry Denial of Service Vulnerability |
|
CVE-2020-1162
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-1160
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-1120
HIGH · vendor
Connected User Experiences and Telemetry Service Denial of Service Vulnerability |
|
CVE-2020-0986
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-0916
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2020-0915
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2020-6110
An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially… |
|
CVE-2020-6496
Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… |
|
CVE-2020-6453
Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2020-6419
Out of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2011-1805
Bad cast in CSS in Google Chrome prior to 11.0.0.0 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-13630
HIGH 7.0
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. |
|
CVE-2020-12387
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulner… |
|
CVE-2020-12393
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user use… |
|
CVE-2020-1191
HIGH 7.8
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp… |
|
CVE-2020-1190
HIGH 7.8
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp… |
|
CVE-2020-1189
HIGH 7.8
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp… |
|
CVE-2020-1188
HIGH 7.8
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp… |
|
CVE-2020-1187
HIGH 7.8
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp… |
|
CVE-2020-1186
HIGH 7.8
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.