Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-0936
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0931
HIGH · vendor
Windows Storage Service Elevation of Privilege Vulnerability |
|
CVE-2019-0902
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0901
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0900
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0899
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0898
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0897
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0896
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0895
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0894
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0893
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0892
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-0891
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0890
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0889
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0886
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2019-0885
HIGH · vendor
Windows OLE Remote Code Execution Vulnerability |
|
CVE-2019-0882
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0881
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2019-0863
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2019-0758
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0734
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0733
HIGH · vendor
Windows Defender Application Control Security Feature Bypass Vulnerability |
|
CVE-2019-0727
HIGH · vendor
Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability |
|
CVE-2019-0707
HIGH · vendor
Windows NDIS Elevation of Privilege Vulnerability |
|
CVE-2019-9813
HIGH 8.8
Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulne… |
|
CVE-2019-9810
HIGH 8.8
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerabili… |
|
CVE-2018-18513
HIGH 7.5
A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature. This can be used as a denial-of-service (DOS) atta… |
|
CVE-2019-0861
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0860
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0829
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0828
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2019-0812
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0810
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0806
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0739
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0879
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0877
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0859
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-0856
HIGH · vendor
Windows Remote Code Execution Vulnerability |
|
CVE-2019-0851
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0849
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0848
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2019-0847
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0846
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0844
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0842
HIGH · vendor
Windows VBScript Engine Remote Code Execution Vulnerability |
|
CVE-2019-0841
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0840
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.