Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
12,531
Actively exploited
246
Publication window
2004-07-27 → 2026-11-11

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all
CVE
CVE-2020-1251
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2020-1247
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2020-1246
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2020-1244
HIGH · vendor

Connected User Experiences and Telemetry Service Denial of Service Vulnerability

CVE-2020-1241
HIGH · vendor

Windows Kernel Security Feature Bypass Vulnerability

CVE-2020-1239
HIGH · vendor

Media Foundation Memory Corruption Vulnerability

CVE-2020-1238
HIGH · vendor

Media Foundation Memory Corruption Vulnerability

CVE-2020-1237
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2020-1236
HIGH · vendor

Jet Database Engine Remote Code Execution Vulnerability

CVE-2020-1235
HIGH · vendor

Windows Runtime Elevation of Privilege Vulnerability

CVE-2020-1234
HIGH · vendor

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2020-1233
HIGH · vendor

Windows Runtime Elevation of Privilege Vulnerability

CVE-2020-1232
HIGH · vendor

Media Foundation Information Disclosure Vulnerability

CVE-2020-1231
HIGH · vendor

Windows Runtime Elevation of Privilege Vulnerability

CVE-2020-1222
HIGH · vendor

Microsoft Store Runtime Elevation of Privilege Vulnerability

CVE-2020-1217
HIGH · vendor

Windows Runtime Information Disclosure Vulnerability

CVE-2020-1212
HIGH · vendor

OLE Automation Elevation of Privilege Vulnerability

CVE-2020-1211
HIGH · vendor

Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2020-1209
HIGH · vendor

Windows Network List Service Elevation of Privilege Vulnerability

CVE-2020-1208
HIGH · vendor

Jet Database Engine Remote Code Execution Vulnerability

CVE-2020-1207
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2020-1206
HIGH · vendor

Windows SMBv3 Client/Server Information Disclosure Vulnerability

CVE-2020-1204
HIGH · vendor

Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability

CVE-2020-1203
HIGH · vendor

Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability

CVE-2020-1202
HIGH · vendor

Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability

CVE-2020-1201
HIGH · vendor

Windows Now Playing Session Manager Elevation of Privilege Vulnerability

CVE-2020-1199
HIGH · vendor

Windows Feedback Hub Elevation of Privilege Vulnerability

CVE-2020-1197
HIGH · vendor

Windows Error Reporting Manager Elevation of Privilege Vulnerability

CVE-2020-1196
HIGH · vendor

Windows Print Configuration Elevation of Privilege Vulnerability

CVE-2020-1194
HIGH · vendor

Windows Registry Denial of Service Vulnerability

CVE-2020-1162
HIGH · vendor

Windows Elevation of Privilege Vulnerability

CVE-2020-1160
HIGH · vendor

Microsoft Graphics Component Information Disclosure Vulnerability

CVE-2020-1120
HIGH · vendor

Connected User Experiences and Telemetry Service Denial of Service Vulnerability

CVE-2020-0986
HIGH · vendor KEV

Windows Kernel Elevation of Privilege Vulnerability

CVE-2020-0916
HIGH · vendor

Windows GDI Elevation of Privilege Vulnerability

CVE-2020-0915
HIGH · vendor

Windows GDI Elevation of Privilege Vulnerability

CVE-2020-6110
HIGH 8.8

An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially…

CVE-2020-6496
HIGH 8.8

Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…

CVE-2020-6453
HIGH 8.8

Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …

CVE-2020-6419
HIGH 8.8

Out of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2011-1805
HIGH 8.8

Bad cast in CSS in Google Chrome prior to 11.0.0.0 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-13630
HIGH 7.0

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

CVE-2020-12387
HIGH 8.1

A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulner…

CVE-2020-12393
HIGH 7.8

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user use…

CVE-2020-1191
HIGH 7.8

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp…

CVE-2020-1190
HIGH 7.8

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp…

CVE-2020-1189
HIGH 7.8

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp…

CVE-2020-1188
HIGH 7.8

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp…

CVE-2020-1187
HIGH 7.8

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp…

CVE-2020-1186
HIGH 7.8

An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exp…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM