Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-8348
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8347
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8343
HIGH · vendor
Windows NDIS Elevation of Privilege Vulnerability |
|
CVE-2018-8341
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-8340
HIGH · vendor
ADFS Security Feature Bypass Vulnerability |
|
CVE-2018-8339
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2018-8253
HIGH · vendor
Microsoft Cortana Elevation of Privilege Vulnerability |
|
CVE-2018-8204
HIGH · vendor
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability |
|
CVE-2018-8200
HIGH · vendor
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability |
|
CVE-2018-0952
HIGH · vendor
Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability |
|
CVE-2018-8310
HIGH 7.5
A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka "Microsoft Office Ta… |
|
CVE-2018-8301
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8294
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8291
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-8290
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8288
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-8287
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr… |
|
CVE-2018-8286
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8280
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8279
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8275
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8274
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8262
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8125
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8313
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-8309
HIGH · vendor
Windows Denial of Service Vulnerability |
|
CVE-2018-8308
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-8307
HIGH · vendor
WordPad Security Feature Bypass Vulnerability |
|
CVE-2018-8304
HIGH · vendor
Windows DNSAPI Denial of Service Vulnerability |
|
CVE-2018-8282
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2018-8222
HIGH · vendor
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability |
|
CVE-2018-8206
HIGH · vendor
Windows Firewall Denial of Service Vulnerability |
|
CVE-2018-0593
HIGH 7.8
Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified direc… |
|
CVE-2018-0592
HIGH 7.8
Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
|
CVE-2018-1060
HIGH 7.5
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use… |
|
CVE-2018-8236
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8229
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8227
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-8111
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8110
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2018-8239
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2018-8233
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2018-8226
HIGH · vendor
HTTP.sys Denial of Service Vulnerability |
|
CVE-2018-8221
HIGH · vendor
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability |
|
CVE-2018-8219
HIGH · vendor
Hypervisor Code Integrity Elevation of Privilege Vulnerability |
|
CVE-2018-8218
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2018-8217
HIGH · vendor
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability |
|
CVE-2018-8216
HIGH · vendor
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability |
|
CVE-2018-8215
HIGH · vendor
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability |
|
CVE-2018-8214
HIGH · vendor
Windows Desktop Bridge Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.