Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-1023
HIGH 7.5
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerabilit… |
|
CVE-2018-1019
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-1011
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
|
CVE-2018-0995
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0994
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0993
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0990
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0980
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0979
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2018-0920
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
|
CVE-2018-1035
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2018-1009
HIGH · vendor
Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2018-1008
HIGH · vendor
Graphics Component Font Parsing Elevation of Privilege Vulnerability |
|
CVE-2018-1003
HIGH · vendor
Microsoft JET Database Engine Remote Code Execution Vulnerability |
|
CVE-2018-0976
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability |
|
CVE-2018-0975
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0974
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0973
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0972
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0971
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0970
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0969
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0968
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0967
HIGH · vendor
Windows SNMP Service Denial of Service Vulnerability |
|
CVE-2018-0966
HIGH · vendor
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2018-0964
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2018-0963
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-0960
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0957
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2018-0956
HIGH · vendor
HTTP/2 Server Denial of Service Vulnerability |
|
CVE-2018-0890
HIGH · vendor
Active Directory Security Feature Bypass Vulnerability |
|
CVE-2018-0887
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0937
HIGH 7.5
ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Sc… |
|
CVE-2018-0936
HIGH 7.5
ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting E… |
|
CVE-2018-0934
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0933
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0931
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0930
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka … |
|
CVE-2018-0922
HIGH 7.8
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Micro… |
|
CVE-2018-0907
HIGH 7.8
Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and Microsoft Office 201… |
|
CVE-2018-0893
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles object… |
|
CVE-2018-0879
HIGH 7.5
Microsoft Edge in Windows 10 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerab… |
|
CVE-2018-0876
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles object… |
|
CVE-2018-0874
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra… |
|
CVE-2018-0873
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scrip… |
|
CVE-2018-0872
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra… |
|
CVE-2018-0983
HIGH · vendor
Windows Storage Services Elevation of Privilege Vulnerability |
|
CVE-2018-0977
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2018-0926
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0904
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.