Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-0683
HIGH · vendor
Active Directory Elevation of Privilege Vulnerability |
|
CVE-2019-0682
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2019-0617
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0614
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0655
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0652
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0651
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0650
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. T… |
|
CVE-2019-0649
HIGH 8.1
A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'. |
|
CVE-2019-0645
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. T… |
|
CVE-2019-0644
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0642
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0640
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0634
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. T… |
|
CVE-2019-0610
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0607
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0605
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0593
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0591
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0590
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2018-12393
HIGH 7.5
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could resu… |
|
CVE-2018-12389
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and w… |
|
CVE-2019-5783
HIGH 8.8
Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform a Dangling Markup Injection att… |
|
CVE-2019-5782
HIGH 8.8
Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf… |
|
CVE-2019-5780
HIGH 7.8
Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript … |
|
CVE-2019-5774
HIGH 8.8
Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who conv… |
|
CVE-2019-5772
HIGH 8.8
Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap co… |
|
CVE-2019-5771
HIGH 8.8
An incorrect JIT of GLSL shaders in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code via a crafted HTML p… |
|
CVE-2019-5770
HIGH 8.8
Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted H… |
|
CVE-2019-5769
HIGH 8.8
Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentia… |
|
CVE-2019-5764
HIGH 8.8
Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
|
CVE-2019-5763
HIGH 8.8
Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
|
CVE-2019-5762
HIGH 8.8
Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sand… |
|
CVE-2019-5761
HIGH 8.8
Incorrect object lifecycle management in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption vi… |
|
CVE-2019-5760
HIGH 8.8
Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a… |
|
CVE-2019-5758
HIGH 8.8
Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a cr… |
|
CVE-2019-5757
HIGH 8.8
An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit object corruption via a craf… |
|
CVE-2019-5756
HIGH 8.8
Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sand… |
|
CVE-2019-5755
HIGH 8.1
Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform arbitrary read/write via a crafted HTML p… |
|
CVE-2018-20253
HIGH 7.8
In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful… |
|
CVE-2019-0674
HIGH · vendor
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
|
CVE-2019-0673
HIGH · vendor
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
|
CVE-2019-0671
HIGH · vendor
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
|
CVE-2019-0663
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0660
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0659
HIGH · vendor
Windows Storage Service Elevation of Privilege Vulnerability |
|
CVE-2019-0656
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2019-0637
HIGH · vendor
Windows Defender Firewall Security Feature Bypass Vulnerability |
|
CVE-2019-0636
HIGH · vendor
Windows Information Disclosure Vulnerability |
|
CVE-2019-0635
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.