Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-0633
HIGH · vendor
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2019-0632
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2019-0631
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2019-0630
HIGH · vendor
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2019-0628
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2019-0627
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2019-0625
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0623
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-0621
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0619
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0616
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0615
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0602
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0601
HIGH · vendor
HID Information Disclosure Vulnerability |
|
CVE-2019-0600
HIGH · vendor
HID Information Disclosure Vulnerability |
|
CVE-2019-0599
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0598
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0597
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0596
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0595
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2018-20252
HIGH 7.8
In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive formats. Successful… |
|
CVE-2018-20250
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When… |
|
CVE-2018-6174
HIGH 8.8
Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
|
CVE-2018-6170
HIGH 8.8
A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
|
CVE-2018-6162
HIGH 8.8
Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted … |
|
CVE-2018-6158
HIGH 7.5
A race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2018-6153
HIGH 8.8
A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform an out of bounds… |
|
CVE-2018-6151
HIGH 8.8
Bad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious exte… |
|
CVE-2018-6144
HIGH 8.8
Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. |
|
CVE-2018-6141
HIGH 8.8
Insufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to… |
|
CVE-2018-6140
HIGH 8.8
Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to insta… |
|
CVE-2018-6139
HIGH 8.8
Insufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a … |
|
CVE-2018-6126
HIGH 8.8
A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. |
|
CVE-2018-6124
HIGH 8.8
Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit object corruption via a craf… |
|
CVE-2018-6120
HIGH 8.8
An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a remote attac… |
|
CVE-2018-6111
HIGH 8.8
An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via … |
|
CVE-2018-6106
HIGH 8.8
An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote attacker to potentially exploit object … |
|
CVE-2018-6084
HIGH 7.8
Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via… |
|
CVE-2018-6056
HIGH 8.8
Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code insi… |
|
CVE-2018-20066
HIGH 8.8
Incorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted … |
|
CVE-2018-20065
HIGH 8.8
Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without a user ges… |
|
CVE-2018-17470
HIGH 7.4
A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform … |
|
CVE-2018-17461
HIGH 8.8
An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. |
|
CVE-2018-17458
HIGH 8.8
An improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to execute arbitrary code … |
|
CVE-2018-17457
HIGH 8.8
An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbit… |
|
CVE-2018-16085
HIGH 8.8
A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
|
CVE-2018-16083
HIGH 8.8
An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds m… |
|
CVE-2018-16081
HIGH 7.4
Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install … |
|
CVE-2018-16076
HIGH 8.8
Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. |
|
CVE-2018-16071
HIGH 8.8
A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.