Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-0823
HIGH · vendor
Named Pipe File System Elevation of Privilege Vulnerability |
|
CVE-2018-0822
HIGH · vendor
Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability |
|
CVE-2018-0821
HIGH · vendor
Windows AppContainer Elevation Of Privilege Vulnerability |
|
CVE-2018-0820
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-0809
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-0757
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0756
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-0742
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2017-5133
HIGH 8.8
Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and… |
|
CVE-2017-5132
HIGH 8.8
Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
|
CVE-2017-5131
HIGH 8.8
An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, ak… |
|
CVE-2017-5130
HIGH 8.8
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to pot… |
|
CVE-2017-5129
HIGH 8.8
A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HT… |
|
CVE-2017-5128
HIGH 8.8
Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, … |
|
CVE-2017-5127
HIGH 8.8
Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
|
CVE-2017-5126
HIGH 8.8
A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
|
CVE-2017-5125
HIGH 8.8
Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2017-15393
HIGH 8.8
Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugg… |
|
CVE-2017-15388
HIGH 8.8
Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a craf… |
|
CVE-2017-15387
HIGH 8.8
Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows w… |
|
CVE-2018-5996
HIGH · vendor
Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within t… |
|
CVE-2017-17969
HIGH · vendor
Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of se… |
|
CVE-2018-0862
HIGH 8.8
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
|
CVE-2018-0849
HIGH 8.8
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
|
CVE-2018-0848
HIGH 8.8
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
|
CVE-2018-0845
HIGH 7.8
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
|
CVE-2018-0812
HIGH 7.8
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
|
CVE-2018-0807
HIGH 8.8
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
|
CVE-2018-0806
HIGH 8.8
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
|
CVE-2018-0805
HIGH 8.8
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
|
CVE-2018-0804
HIGH 8.8
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e… |
|
CVE-2018-0802
HIGH 7.8
KEV
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability d… |
|
CVE-2018-0801
HIGH 8.8
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability … |
|
CVE-2018-0798
HIGH 8.8
KEV
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability … |
|
CVE-2018-0797
HIGH 7.8
Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka … |
|
CVE-2018-0796
HIGH 8.8
Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability … |
|
CVE-2018-0795
HIGH 8.8
Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memor… |
|
CVE-2018-0794
HIGH 8.8
Microsoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability d… |
|
CVE-2018-0793
HIGH 7.8
Microsoft Outlook 2007, Microsoft Outlook 2010 and Microsoft Outlook 2013 allow a remote code execution vulnerability due to the way email messages are parsed,… |
|
CVE-2018-0792
HIGH 8.8
Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Rem… |
|
CVE-2018-0791
HIGH 7.8
Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, and Microsoft Outlook 2016 allow a remote code execution vulnerability due to the way e… |
|
CVE-2015-1290
HIGH 8.8
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service… |
|
CVE-2018-0754
HIGH · vendor
OpenType Font Driver Information Disclosure Vulnerability |
|
CVE-2018-0753
HIGH · vendor
Windows IPSec Denial of Service Vulnerability |
|
CVE-2018-0752
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0751
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0749
HIGH · vendor
SMB Server Elevation of Privilege Vulnerability |
|
CVE-2018-0748
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2018-0747
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0746
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.