Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-5859
HIGH 8.8
Insufficient filtering in URI schemes in Google Chrome on Windows prior to 76.0.3809.87 allowed a remote attacker to bypass navigation restrictions via a craft… |
|
CVE-2019-5858
HIGH 8.8
Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a cra… |
|
CVE-2019-5856
HIGH 8.8
Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass … |
|
CVE-2019-5854
HIGH 8.8
Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
|
CVE-2019-5853
HIGH 8.8
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
|
CVE-2019-5851
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-5849
HIGH 8.1
Out of bounds read in Skia in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to obtain potentially sensitive information from process memory via… |
|
CVE-2019-13724
HIGH 8.8
Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to poten… |
|
CVE-2019-13723
HIGH 8.8
Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploi… |
|
CVE-2019-13721
HIGH 8.8
Use after free in PDFium in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13720
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13706
HIGH 7.8
Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF… |
|
CVE-2019-13702
HIGH 7.8
Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a craf… |
|
CVE-2019-13700
HIGH 8.8
Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to pot… |
|
CVE-2019-13699
HIGH 8.8
Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c… |
|
CVE-2019-13698
HIGH 8.8
Out of bounds memory access in JavaScript in Google Chrome prior to 73.0.3683.103 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
|
CVE-2019-13696
HIGH 8.8
Use after free in JavaScript in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13695
HIGH 8.8
Use after free in audio in Google Chrome on Android prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2019-13694
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13693
HIGH 8.8
Use after free in IndexedDB in Google Chrome prior to 77.0.3865.120 allowed a remote attacker who had compromised the renderer process to execute arbitrary cod… |
|
CVE-2019-13692
HIGH 8.8
Insufficient policy enforcement in reader mode in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass site isolation via a crafted HTML pag… |
|
CVE-2019-13688
HIGH 8.8
Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13687
HIGH 8.8
Use after free in Blink in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13686
HIGH 8.8
Use after free in offline mode in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13685
HIGH 8.8
Use after free in sharing view in Google Chrome prior to 77.0.3865.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13682
HIGH 8.8
Insufficient policy enforcement in external protocol handling in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass same origin policy via… |
|
CVE-2019-13673
HIGH 7.4
Insufficient data validation in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML p… |
|
CVE-2019-13668
HIGH 7.4
Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTM… |
|
CVE-2019-13666
HIGH 7.4
Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
|
CVE-2019-1448
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2019-1428
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engi… |
|
CVE-2019-1427
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engi… |
|
CVE-2019-1426
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engi… |
|
CVE-2019-1405
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP… |
|
CVE-2019-1385
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to sys… |
|
CVE-2019-1456
HIGH · vendor
OpenType Font Parsing Remote Code Execution Vulnerability |
|
CVE-2019-1454
HIGH · vendor
Windows User Profile Service Elevation of Privilege Vulnerability |
|
CVE-2019-1440
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2019-1439
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1438
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2019-1437
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2019-1436
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2019-1435
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2019-1433
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2019-1424
HIGH · vendor
NetLogon Security Feature Bypass Vulnerability |
|
CVE-2019-1423
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1422
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1420
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1418
HIGH · vendor
Windows Modules Installer Service Information Disclosure Vulnerability |
|
CVE-2019-1417
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.