Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-0293
HIGH 7.5
Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, a… |
|
CVE-2017-8673
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability |
|
CVE-2017-8666
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2017-8664
HIGH · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2017-8633
HIGH · vendor
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2017-8627
HIGH · vendor
Windows Subsystem for Linux Denial of Service Vulnerability |
|
CVE-2017-8624
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2017-8623
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2017-8593
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0174
HIGH · vendor
Windows NetBIOS Denial of Service Vulnerability |
|
CVE-2017-8663
Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a remote code exec… |
|
CVE-2017-8571
Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a security feature… |
|
CVE-2017-9233
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malfo… |
|
CVE-2017-0152
HIGH 8.1
A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers. The v… |
|
CVE-2017-8619
HIGH 7.5
Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scr… |
|
CVE-2017-8617
HIGH 7.5
Microsoft Edge in Windows 10 1703 Microsoft Edge allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handl… |
|
CVE-2017-8610
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to… |
|
CVE-2017-8609
HIGH 7.5
Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the cont… |
|
CVE-2017-8608
HIGH 7.5
Microsoft browsers in Microsoft Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, … |
|
CVE-2017-8607
HIGH 7.5
Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607,… |
|
CVE-2017-8606
HIGH 7.5
Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607,… |
|
CVE-2017-8605
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
|
CVE-2017-8604
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current … |
|
CVE-2017-8603
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current … |
|
CVE-2017-8601
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
|
CVE-2017-8598
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
|
CVE-2017-8596
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user w… |
|
CVE-2017-8595
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the cu… |
|
CVE-2017-8502
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnera… |
|
CVE-2017-8501
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnera… |
|
CVE-2017-8590
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2017-8588
HIGH · vendor
WordPad Remote Code Execution Vulnerability |
|
CVE-2017-8587
HIGH · vendor
Windows Explorer Denial of Service Vulnerability |
|
CVE-2017-8582
HIGH · vendor
Http.sys Information Disclosure Vulnerability |
|
CVE-2017-8581
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-8580
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-8578
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-8577
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-8574
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-8573
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-8566
HIGH · vendor
Windows IME Elevation of Privilege Vulnerability |
|
CVE-2017-8565
HIGH · vendor
Windows PowerShell Remote Code Execution Vulnerability |
|
CVE-2017-8564
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8563
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2017-8562
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2017-8561
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2017-8557
HIGH · vendor
Windows System Information Console Information Disclosure Vulnerability |
|
CVE-2017-8556
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-8495
HIGH · vendor
Kerberos SNAME Security Feature Bypass Vulnerability |
|
CVE-2017-8486
HIGH · vendor
Win32k Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.