Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-1103
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1092
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1062
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1001
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corr… |
|
CVE-2019-13602
HIGH 7.8
An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial … |
|
CVE-2019-1129
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1128
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1127
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1126
HIGH · vendor
ADFS Security Feature Bypass Vulnerability |
|
CVE-2019-1124
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1123
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1122
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1121
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1120
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1119
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1118
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1117
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1108
HIGH · vendor
Remote Desktop Protocol Client Information Disclosure Vulnerability |
|
CVE-2019-1097
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1096
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2019-1095
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1094
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1093
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1091
HIGH · vendor
Microsoft unistore.dll Information Disclosure Vulnerability |
|
CVE-2019-1090
HIGH · vendor
Windows dnsrslvr.dll Elevation of Privilege Vulnerability |
|
CVE-2019-1089
HIGH · vendor
Windows RPCSS Elevation of Privilege Vulnerability |
|
CVE-2019-1088
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1087
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1086
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1085
HIGH · vendor
Windows WLAN Service Elevation of Privilege Vulnerability |
|
CVE-2019-1082
HIGH · vendor
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1074
HIGH · vendor
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1073
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1071
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1067
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2019-1037
HIGH · vendor
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2019-1006
HIGH · vendor
WCF/WIF SAML Token Authentication Bypass Vulnerability |
|
CVE-2019-0999
HIGH · vendor
DirectX Elevation of Privilege Vulnerability |
|
CVE-2019-0975
HIGH · vendor
ADFS Security Feature Bypass Vulnerability |
|
CVE-2019-0966
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-0887
HIGH · vendor
Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2019-0880
Microsoft splwow64 Elevation of Privilege Vulnerability |
|
CVE-2019-0865
HIGH · vendor
SymCrypt Denial of Service Vulnerability |
|
CVE-2019-0811
HIGH · vendor
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2019-13404
HIGH 7.8
The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code… |
|
CVE-2019-5836
HIGH 8.8
Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-5831
HIGH 8.8
Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-5829
HIGH 8.8
Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a … |
|
CVE-2019-5828
HIGH 8.8
Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via… |
|
CVE-2019-5827
HIGH 8.8
Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.