Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-17463
HIGH 8.8
Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafte… |
|
CVE-2018-8588
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8582
HIGH 8.8
A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code … |
|
CVE-2018-8577
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
|
CVE-2018-8576
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Co… |
|
CVE-2018-8573
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Exe… |
|
CVE-2018-8557
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8556
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8555
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8551
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8543
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8542
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8541
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8524
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Co… |
|
CVE-2018-8522
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Co… |
|
CVE-2018-8592
HIGH · vendor
Windows Elevation Of Privilege Vulnerability |
|
CVE-2018-8584
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2018-8566
HIGH · vendor
BitLocker Security Feature Bypass Vulnerability |
|
CVE-2018-8565
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2018-8562
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2018-8561
HIGH · vendor
DirectX Elevation of Privilege Vulnerability |
|
CVE-2018-8554
HIGH · vendor
DirectX Elevation of Privilege Vulnerability |
|
CVE-2018-8550
HIGH · vendor
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2018-8549
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2018-8547
HIGH · vendor
Active Directory Federation Services XSS Vulnerability |
|
CVE-2018-8485
HIGH · vendor
DirectX Elevation of Privilege Vulnerability |
|
CVE-2018-8471
HIGH · vendor
Microsoft RemoteFX Virtual GPU miniport driver Elevation of Privilege Vulnerability |
|
CVE-2018-8454
HIGH · vendor
Windows Audio Service Information Disclosure Vulnerability |
|
CVE-2018-8450
HIGH · vendor
Windows Search Remote Code Execution Vulnerability |
|
CVE-2018-8417
HIGH · vendor
Microsoft JScript Security Feature Bypass Vulnerability |
|
CVE-2018-8415
HIGH · vendor
Microsoft PowerShell Tampering Vulnerability |
|
CVE-2018-8408
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8407
HIGH · vendor
Windows Remote Procedure Call Information Disclosure Vulnerability |
|
CVE-2018-8256
HIGH · vendor
Microsoft PowerShell Remote Code Execution Vulnerability |
|
CVE-2018-12385
HIGH 7.0
A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This is… |
|
CVE-2018-12379
HIGH 7.8
When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially ex… |
|
CVE-2018-12368
HIGH 8.1
Windows 10 does not warn users before opening executable files with the SettingContent-ms extension even when they have been downloaded from the internet and h… |
|
CVE-2018-12364
HIGH 8.8
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the targ… |
|
CVE-2018-12363
HIGH 8.8
A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node… |
|
CVE-2018-12362
HIGH 8.8
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploi… |
|
CVE-2018-12361
HIGH 8.8
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when th… |
|
CVE-2018-12360
HIGH 8.8
A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a p… |
|
CVE-2018-12359
HIGH 8.8
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written ou… |
|
CVE-2018-8513
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8511
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8510
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8509
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8505
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8504
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Wo… |
|
CVE-2018-8503
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.