Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-1326
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability |
|
CVE-2019-1325
HIGH · vendor
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability |
|
CVE-2019-1323
HIGH · vendor
Microsoft Windows Update Client Elevation of Privilege Vulnerability |
|
CVE-2019-1322
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1321
HIGH · vendor
Microsoft Windows CloudStore Elevation of Privilege Vulnerability |
|
CVE-2019-1320
HIGH · vendor
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1319
HIGH · vendor
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2019-1318
HIGH · vendor
Microsoft Windows Transport Layer Security Spoofing Vulnerability |
|
CVE-2019-1317
HIGH · vendor
Microsoft Windows Denial of Service Vulnerability |
|
CVE-2019-1316
HIGH · vendor
Microsoft Windows Setup Elevation of Privilege Vulnerability |
|
CVE-2019-1315
Windows Error Reporting Manager Elevation of Privilege Vulnerability |
|
CVE-2019-1311
HIGH · vendor
Windows Imaging API Remote Code Execution Vulnerability |
|
CVE-2019-1230
HIGH · vendor
Hyper-V Information Disclosure Vulnerability |
|
CVE-2019-1166
HIGH · vendor
Windows NTLM Tampering Vulnerability |
|
CVE-2019-11755
HIGH 7.5
A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the sign… |
|
CVE-2019-11752
HIGH 8.8
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploi… |
|
CVE-2019-11746
HIGH 8.8
A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable c… |
|
CVE-2019-11740
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these bugs showed evidenc… |
|
CVE-2019-8075
HIGH 7.5
Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Di… |
|
CVE-2019-1300
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1298
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1297
HIGH 8.8
KEV
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2019-1237
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1217
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1138
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1303
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1294
HIGH · vendor
Windows Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2019-1293
HIGH · vendor
Windows SMB Client Driver Information Disclosure Vulnerability |
|
CVE-2019-1292
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1289
HIGH · vendor
Windows Update Delivery Optimization Elevation of Privilege Vulnerability |
|
CVE-2019-1287
HIGH · vendor
Windows Network Connectivity Assistant Elevation of Privilege Vulnerability |
|
CVE-2019-1286
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1285
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1282
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2019-1278
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1277
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1274
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1273
HIGH · vendor
Active Directory Federation Services XSS Vulnerability |
|
CVE-2019-1272
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-1271
HIGH · vendor
Windows Media Elevation of Privilege Vulnerability |
|
CVE-2019-1270
HIGH · vendor
Microsoft Windows Store Installer Elevation of Privilege Vulnerability |
|
CVE-2019-1269
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2019-1268
HIGH · vendor
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2019-1267
HIGH · vendor
Microsoft Compatibility Appraiser Elevation of Privilege Vulnerability |
|
CVE-2019-1256
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1254
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2019-1253
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1252
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1251
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1250
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.