Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 12,531
Actively exploited: 246
Publication window: 2004-07-27 → 2026-11-11

All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2019-5824 HIGH 8.8 2019-06-27 Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…	HIGH 8.8	—		2019-06-27
CVE-2019-5822 HIGH 8.8 2019-06-27 Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.	HIGH 8.8	—		2019-06-27
CVE-2019-5821 HIGH 8.8 2019-06-27 Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.	HIGH 8.8	—		2019-06-27
CVE-2019-5820 HIGH 8.8 2019-06-27 Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.	HIGH 8.8	—		2019-06-27
CVE-2019-5819 HIGH 7.8 2019-06-27 Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108 allowed a local attacker to execute arbitrary code via a crafte…	HIGH 7.8	—		2019-06-27
CVE-2019-5817 HIGH 8.8 2019-06-27 Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted…	HIGH 8.8	—		2019-06-27
CVE-2019-5816 HIGH 8.8 2019-06-27 Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a…	HIGH 8.8	—		2019-06-27
CVE-2019-5813 HIGH 8.8 2019-06-27 Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2019-06-27
CVE-2019-5811 HIGH 8.8 2019-06-27 Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML p…	HIGH 8.8	—		2019-06-27
CVE-2019-5809 HIGH 8.8 2019-06-27 Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege …	HIGH 8.8	—		2019-06-27
CVE-2019-5808 HIGH 8.8 2019-06-27 Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2019-06-27
CVE-2019-5807 HIGH 8.8 2019-06-27 Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2019-06-27
CVE-2019-5806 HIGH 8.8 2019-06-27 Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM…	HIGH 8.8	—		2019-06-27
CVE-2018-6176 HIGH 7.8 2019-06-27 Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process …	HIGH 7.8	—		2019-06-27
CVE-2018-6161 HIGH 8.8 2019-06-27 Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page.	HIGH 8.8	—		2019-06-27
CVE-2018-6157 HIGH 8.8 2019-06-27 Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.	HIGH 8.8	—		2019-06-27
CVE-2018-6156 HIGH 8.8 2019-06-27 Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a …	HIGH 8.8	—		2019-06-27
CVE-2018-6154 HIGH 8.8 2019-06-27 Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM…	HIGH 8.8	—		2019-06-27
CVE-2018-6149 HIGH 8.8 2019-06-27 Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.	HIGH 8.8	—		2019-06-27
CVE-2018-6138 HIGH 8.1 2019-06-27 Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extens…	HIGH 8.1	—		2019-06-27
CVE-2018-6131 HIGH 8.8 2019-06-27 Object lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM…	HIGH 8.8	—		2019-06-27
CVE-2018-6121 HIGH 8.8 2019-06-27 Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform privilege escalation via a crafted HTML …	HIGH 8.8	—		2019-06-27
CVE-2018-6118 HIGH 8.8 2019-06-27 A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attacker who had…	HIGH 8.8	—		2019-06-27
CVE-2018-17479 HIGH 8.8 2019-06-27 Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via…	HIGH 8.8	—		2019-06-27
CVE-2018-17478 HIGH 8.8 2019-06-27 Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a cr…	HIGH 8.8	—		2019-06-27
CVE-2018-16070 HIGH 8.8 2019-06-27 Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2019-06-27
CVE-2019-1069 HIGH 7.8 KEV Windows 2019-06-12 An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited …	HIGH 7.8	KEV	Windows	2019-06-12
CVE-2019-1038 HIGH 7.5 Microsoft Edge 2019-06-12 A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that …	HIGH 7.5	—	Microsoft Edge	2019-06-12
CVE-2019-1034 HIGH 7.8 2019-06-12 A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploi…	HIGH 7.8	—		2019-06-12
CVE-2019-1065 HIGH · vendor Windows 2019-06-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1064 HIGH · vendor KEV Windows 2019-06-11 Windows Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2019-06-11
CVE-2019-1053 HIGH · vendor Windows 2019-06-11 Windows Shell Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1050 HIGH · vendor Windows 2019-06-11 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1046 HIGH · vendor Windows 2019-06-11 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1045 HIGH · vendor Windows 2019-06-11 Windows Network File System Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1044 HIGH · vendor Windows 2019-06-11 Windows Secure Kernel Mode Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1043 HIGH · vendor Windows 2019-06-11 Comctl32 Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1041 HIGH · vendor Windows 2019-06-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1040 HIGH · vendor Windows 2019-06-11 Windows NTLM Tampering Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1039 HIGH · vendor Windows 2019-06-11 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1028 HIGH · vendor Windows 2019-06-11 Windows Audio Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1027 HIGH · vendor Windows 2019-06-11 Windows Audio Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1026 HIGH · vendor Windows 2019-06-11 Windows Audio Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1025 HIGH · vendor Windows 2019-06-11 Windows Denial of Service Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1022 HIGH · vendor Windows 2019-06-11 Windows Audio Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1021 HIGH · vendor Windows 2019-06-11 Windows Audio Service Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1019 HIGH · vendor Windows 2019-06-11 Microsoft Windows Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1018 HIGH · vendor Windows 2019-06-11 DirectX Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1017 HIGH · vendor Windows 2019-06-11 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11
CVE-2019-1014 HIGH · vendor Windows 2019-06-11 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2019-06-11

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM