Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 12,531
Actively exploited: 246
Publication window: 2004-07-27 → 2026-11-11

All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2017-8465 HIGH · vendor Windows 2017-06-13 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-8462 HIGH · vendor Windows 2017-06-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-8460 HIGH · vendor Windows 2017-06-13 Windows PDF Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0300 HIGH · vendor Windows 2017-06-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0299 HIGH · vendor Windows 2017-06-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0298 HIGH · vendor Windows 2017-06-13 Windows COM Session Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0297 HIGH · vendor Windows 2017-06-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0296 HIGH · vendor Windows 2017-06-13 Windows TDX Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0295 HIGH · vendor Windows 2017-06-13 Windows Default Folder Tampering Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0289 HIGH · vendor Windows 2017-06-13 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0288 HIGH · vendor Windows 2017-06-13 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0287 HIGH · vendor Windows 2017-06-13 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0285 HIGH · vendor Windows 2017-06-13 Windows Uniscribe Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0284 HIGH · vendor Windows 2017-06-13 Windows Uniscribe Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0282 HIGH · vendor Windows 2017-06-13 Windows Uniscribe Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0219 HIGH · vendor Windows 2017-06-13 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0218 HIGH · vendor Windows 2017-06-13 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0216 HIGH · vendor Windows 2017-06-13 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0215 HIGH · vendor Windows 2017-06-13 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0193 HIGH · vendor Windows 2017-06-13 Hypervisor Code Integrity Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0173 HIGH · vendor Windows 2017-06-13 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2016-5177 HIGH 8.8 2017-05-23 Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecif…	HIGH 8.8	—		2017-05-23
CVE-2016-7804 HIGH 7.8 7-Zip 2017-05-22 Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified …	HIGH 7.8	—	7-Zip	2017-05-22
CVE-2017-0281 HIGH 7.8 2017-05-12 Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project…	HIGH 7.8	—		2017-05-12
CVE-2017-0266 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0254 HIGH 7.8 2017-05-12 Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP…	HIGH 7.8	—		2017-05-12
CVE-2017-0240 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0238 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0236 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0235 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0234 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0233 HIGH 8.3 Microsoft Edge 2017-05-12 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 8.3	—	Microsoft Edge	2017-05-12
CVE-2017-0230 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0229 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0228 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine …	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0227 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0224 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0221 HIGH 7.5 Microsoft Edge 2017-05-12 A vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This CVE ID is unique f…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0280 HIGH · vendor Windows 2017-05-09 Windows SMB Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0276 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0275 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0274 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0273 HIGH · vendor Windows 2017-05-09 Windows SMB Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0271 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0270 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0269 HIGH · vendor Windows 2017-05-09 Windows SMB Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0268 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0267 HIGH · vendor Windows 2017-05-09 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0263 HIGH · vendor KEV Windows 2017-05-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2017-05-09
CVE-2017-0259 HIGH · vendor Windows 2017-05-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM