Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-6449
HIGH 8.8
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-6429
HIGH 8.8
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-6428
HIGH 8.8
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-6427
HIGH 8.8
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-6424
HIGH 8.8
Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-6422
HIGH 8.8
Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-6420
HIGH 8.8
Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page. |
|
CVE-2020-10531
HIGH 8.8
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exi… |
|
CVE-2020-0892
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
|
CVE-2020-0850
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
|
CVE-2020-0848
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0831
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0830
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corr… |
|
CVE-2020-0829
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0828
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0827
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0826
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0825
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0823
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0816
HIGH 8.8
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. |
|
CVE-2020-0813
HIGH 7.5
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to… |
|
CVE-2020-0812
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra… |
|
CVE-2020-0811
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra… |
|
CVE-2020-0787
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows … |
|
CVE-2020-0768
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corr… |
|
CVE-2013-1753
HIGH 7.5
The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a… |
|
CVE-2020-0898
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2020-0897
HIGH · vendor
Windows Work Folder Service Elevation of Privilege Vulnerability |
|
CVE-2020-0896
HIGH · vendor
Windows Hard Link Elevation of Privilege Vulnerability |
|
CVE-2020-0887
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-0885
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-0882
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2020-0880
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2020-0879
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2020-0877
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-0876
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2020-0874
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2020-0871
HIGH · vendor
Windows Network Connections Service Information Disclosure Vulnerability |
|
CVE-2020-0868
HIGH · vendor
Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
|
CVE-2020-0867
HIGH · vendor
Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
|
CVE-2020-0866
HIGH · vendor
Windows Work Folder Service Elevation of Privilege Vulnerability |
|
CVE-2020-0865
HIGH · vendor
Windows Work Folder Service Elevation of Privilege Vulnerability |
|
CVE-2020-0864
HIGH · vendor
Windows Work Folder Service Elevation of Privilege Vulnerability |
|
CVE-2020-0863
HIGH · vendor
Connected User Experiences and Telemetry Service Information Disclosure Vulnerability |
|
CVE-2020-0861
HIGH · vendor
Windows Network Driver Interface Specification (NDIS) Information Disclosure Vulnerability |
|
CVE-2020-0860
HIGH · vendor
Windows ActiveX Installer Service Elevation of Privilege Vulnerability |
|
CVE-2020-0859
HIGH · vendor
Windows Modules Installer Service Information Disclosure Vulnerability |
|
CVE-2020-0858
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-0857
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0854
HIGH · vendor
Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.