Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-0661
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2020-0660
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability |
|
CVE-2020-0659
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2020-0658
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2020-0657
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2020-0655
HIGH · vendor
Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2019-9674
HIGH 7.5
Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb. |
|
CVE-2020-0652
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office M… |
|
CVE-2020-0651
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2020-0650
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2020-0638
An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first … |
|
CVE-2020-0644
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-0643
HIGH · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2020-0642
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-0641
HIGH · vendor
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2020-0639
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2020-0637
HIGH · vendor
Remote Desktop Web Access Information Disclosure Vulnerability |
|
CVE-2020-0636
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2020-0635
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-0634
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2020-0633
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0632
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0631
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0630
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0629
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0628
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0627
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0626
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0625
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0624
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-0623
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0622
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-0621
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2020-0620
HIGH · vendor
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
|
CVE-2020-0617
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2020-0616
HIGH · vendor
Microsoft Windows Denial of Service Vulnerability |
|
CVE-2020-0615
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2020-0614
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0613
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0612
HIGH · vendor
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2020-0608
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2020-0607
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-0601
Windows CryptoAPI Spoofing Vulnerability |
|
CVE-2020-6377
HIGH 8.8
Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13767
HIGH 8.8
Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
|
CVE-2019-17012
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evidence of memory corruption and we presu… |
|
CVE-2019-17011
HIGH 7.5
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a po… |
|
CVE-2019-17010
HIGH 7.5
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-f… |
|
CVE-2019-17009
HIGH 7.8
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a … |
|
CVE-2019-17008
HIGH 8.8
When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vulnerability affects… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.