Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-1249
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1248
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1247
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1246
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1245
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1244
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1243
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1242
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1241
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1240
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1235
HIGH · vendor
Windows Text Service Framework Elevation of Privilege Vulnerability |
|
CVE-2019-1232
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2019-1219
HIGH · vendor
Windows Transaction Manager Information Disclosure Vulnerability |
|
CVE-2019-1216
HIGH · vendor
DirectX Information Disclosure Vulnerability |
|
CVE-2019-1215
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1214
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2019-0928
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-16056
HIGH 7.5
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addres… |
|
CVE-2019-15903
HIGH 7.5
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCu… |
|
CVE-2019-14970
HIGH 7.8
A vulnerability in mkv::event_thread_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv … |
|
CVE-2019-14778
HIGH 7.8
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |
|
CVE-2019-14777
HIGH 7.8
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |
|
CVE-2019-14776
HIGH 7.8
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file. |
|
CVE-2019-14533
HIGH 7.8
The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. |
|
CVE-2019-14535
HIGH 7.8
A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a cra… |
|
CVE-2019-14498
HIGH 7.8
A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted C… |
|
CVE-2019-14438
HIGH 7.8
A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-base… |
|
CVE-2019-14437
HIGH 7.8
The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buf… |
|
CVE-2019-1201
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploi… |
|
CVE-2019-1200
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exp… |
|
CVE-2019-1140
HIGH 8.8
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-9518
HIGH · vendor
HTTP/2 Server Denial of Service Vulnerability |
|
CVE-2019-9514
HIGH · vendor
HTTP/2 Server Denial of Service Vulnerability |
|
CVE-2019-9513
HIGH · vendor
HTTP/2 Server Denial of Service Vulnerability |
|
CVE-2019-9512
HIGH · vendor
HTTP/2 Server Denial of Service Vulnerability |
|
CVE-2019-9511
HIGH · vendor
HTTP/2 Server Denial of Service Vulnerability |
|
CVE-2019-9506
Encryption Key Negotiation of Bluetooth Vulnerability |
|
CVE-2019-1227
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1225
HIGH · vendor
Remote Desktop Protocol Server Information Disclosure Vulnerability |
|
CVE-2019-1224
HIGH · vendor
Remote Desktop Protocol Server Information Disclosure Vulnerability |
|
CVE-2019-1223
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability |
|
CVE-2019-1212
HIGH · vendor
Windows DHCP Server Denial of Service Vulnerability |
|
CVE-2019-1206
HIGH · vendor
Windows DHCP Server Denial of Service Vulnerability |
|
CVE-2019-1198
HIGH · vendor
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1190
HIGH · vendor
Windows Image Elevation of Privilege Vulnerability |
|
CVE-2019-1187
HIGH · vendor
XmlLite Runtime Denial of Service Vulnerability |
|
CVE-2019-1186
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1185
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2019-1184
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1180
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.