Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 12,531
Actively exploited: 246
Publication window: 2004-07-27 → 2026-11-11

All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-0745 HIGH · vendor Windows 2018-01-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0744 HIGH · vendor Windows 2018-01-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0743 HIGH · vendor Windows 2018-01-09 Windows Subsystem for Linux Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0781 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0778 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0777 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0776 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0775 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0774 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0773 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0772 HIGH 7.5 Microsoft Edge 2018-01-04 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0770 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0769 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0768 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0762 HIGH 7.5 Microsoft Edge 2018-01-04 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0758 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2017-17522 HIGH · vendor 2017-12-14 Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might all…	HIGH · vendor	—		2017-12-14
CVE-2017-11918 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the curren…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11914 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11912 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and I…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11911 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11910 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11909 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11908 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11905 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11895 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Internet …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11894 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and a…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11893 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11889 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context o…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11888 HIGH 7.5 Microsoft Edge 2017-12-12 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11927 HIGH · vendor Windows 2017-12-12 Microsoft Windows Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-12-12
CVE-2017-11899 HIGH · vendor Windows 2017-12-12 Device Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-12-12
CVE-2017-11885 HIGH · vendor Windows 2017-12-12 Windows RRAS Service Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2017-12-12
CVE-2017-11884 HIGH 7.8 2017-11-15 Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in me…	HIGH 7.8	—		2017-11-15
CVE-2017-11878 HIGH 7.8 2017-11-15 Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsof…	HIGH 7.8	—		2017-11-15
CVE-2017-11873 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same us…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11871 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, d…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11870 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, d…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11866 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11862 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to h…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11861 HIGH 7.5 Microsoft Edge 2017-11-15 Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the curr…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11858 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Mi…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11854 HIGH 8.8 2017-11-15 Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service P…	HIGH 8.8	—		2017-11-15
CVE-2017-11846 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Mi…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11845 HIGH 7.5 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles …	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11843 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Micros…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11841 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11840 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11839 HIGH 7.5 Microsoft Edge 2017-11-15 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affect…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11838 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft …	HIGH 7.5	—	Microsoft Edge	2017-11-15

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM