Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-16065
HIGH 8.8
A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code in… |
|
CVE-2017-15428
HIGH 8.8
Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and… |
|
CVE-2017-15405
HIGH 7.0
Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a persistance established by a malicious code… |
|
CVE-2017-15404
HIGH 7.8
An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Go… |
|
CVE-2017-15403
HIGH 7.3
Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163… |
|
CVE-2017-15401
HIGH 8.8
A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Chrome prior to 62.0.3202.62 allowed a re… |
|
CVE-2016-9651
HIGH 8.8
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary co… |
|
CVE-2016-10403
HIGH 8.8
Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read v… |
|
CVE-2019-0585
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Exe… |
|
CVE-2019-0568
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2019-0567
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2019-0566
HIGH 8.8
An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulnerability." This aff… |
|
CVE-2019-0565
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2019-0539
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2019-0584
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0583
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0582
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0581
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0580
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0579
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0578
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0577
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0576
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0575
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0574
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0573
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0572
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0571
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0570
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2019-0569
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0555
HIGH · vendor
Microsoft XmlDocument Elevation of Privilege Vulnerability |
|
CVE-2019-0554
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0553
HIGH · vendor
Windows Subsystem for Linux Information Disclosure Vulnerability |
|
CVE-2019-0552
HIGH · vendor
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2019-0549
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0543
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0538
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0536
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-20406
HIGH 7.5
Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt. … |
|
CVE-2018-20346
HIGH 8.1
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after craf… |
|
CVE-2018-8636
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
|
CVE-2018-8629
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8628
HIGH 7.8
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft Powe… |
|
CVE-2018-8624
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8618
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8617
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8597
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
|
CVE-2018-8583
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-18359
HIGH 8.8
Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to perform an out of bounds memory read via a cr… |
|
CVE-2018-18356
HIGH 8.8
An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit h… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.