Vulnerabilities

Tracked app vulnerabilities

12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 12,531
Actively exploited: 246
Publication window: 2004-07-27 → 2026-11-11

All CVEs 12,531 CISA KEV 246 Public exploit 358 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

12,531 entries High Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2017-0258 HIGH · vendor Windows 2017-05-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0246 HIGH · vendor Windows 2017-05-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0214 HIGH · vendor Windows 2017-05-09 Windows COM Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0213 HIGH · vendor KEV Windows 2017-05-09 Windows COM Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2017-05-09
CVE-2017-0212 HIGH · vendor Windows 2017-05-09 Windows Hyper-V vSMB Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0190 HIGH · vendor Windows 2017-05-09 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0171 HIGH · vendor Windows 2017-05-09 Windows DNS Server Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-0077 HIGH · vendor Windows 2017-05-09 Dxgkrnl.sys Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-05-09
CVE-2017-5043 HIGH 8.8 2017-04-24 Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perfor…	HIGH 8.8	—		2017-04-24
CVE-2017-5035 HIGH 8.1 2017-04-24 Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.	HIGH 8.1	—		2017-04-24
CVE-2017-5034 HIGH 8.8 2017-04-24 A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a…	HIGH 8.8	—		2017-04-24
CVE-2017-5032 HIGH 8.8 2017-04-24 PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially ex…	HIGH 8.8	—		2017-04-24
CVE-2017-5031 HIGH 8.8 2017-04-24 A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HT…	HIGH 8.8	—		2017-04-24
CVE-2016-5168 HIGH 7.5 2017-04-21 Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.	HIGH 7.5	—		2017-04-21
CVE-2017-0205 HIGH 7.5 Microsoft Edge 2017-04-12 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way th…	HIGH 7.5	—	Microsoft Edge	2017-04-12
CVE-2017-0200 HIGH 7.5 Microsoft Edge 2017-04-12 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way th…	HIGH 7.5	—	Microsoft Edge	2017-04-12
CVE-2017-0106 HIGH 7.8 2017-04-12 Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code o…	HIGH 7.8	—		2017-04-12
CVE-2017-0093 HIGH 7.5 Microsoft Edge 2017-04-12 A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory in Microsoft browse…	HIGH 7.5	—	Microsoft Edge	2017-04-12
CVE-2017-0211 HIGH · vendor Windows 2017-04-11 Windows OLE Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0192 HIGH · vendor Windows 2017-04-11 OpenType Font Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0191 HIGH · vendor Windows 2017-04-11 Windows IPSec Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0189 HIGH · vendor Windows 2017-04-11 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0188 HIGH · vendor Windows 2017-04-11 Win32k Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0186 HIGH · vendor Windows 2017-04-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0185 HIGH · vendor Windows 2017-04-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0184 HIGH · vendor Windows 2017-04-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0183 HIGH · vendor Windows 2017-04-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0182 HIGH · vendor Windows 2017-04-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0179 HIGH · vendor Windows 2017-04-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0178 HIGH · vendor Windows 2017-04-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0167 HIGH · vendor Windows 2017-04-11 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0166 HIGH · vendor Windows 2017-04-11 LDAP Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0165 HIGH · vendor Windows 2017-04-11 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0164 HIGH · vendor Windows 2017-04-11 Active Directory Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0159 HIGH · vendor Windows 2017-04-11 ADFS Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0156 HIGH · vendor Windows 2017-04-11 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0058 HIGH · vendor Windows 2017-04-11 Win32k Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-04-11
CVE-2017-0151 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0150 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0145 HIGH 8.8 KEV Windows 2017-03-17 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…	HIGH 8.8	KEV	Windows	2017-03-17
CVE-2017-0144 HIGH 8.8 KEV Windows 2017-03-17 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…	HIGH 8.8	KEV	Windows	2017-03-17
CVE-2017-0141 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0138 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0137 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0136 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0134 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0133 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0132 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0131 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17
CVE-2017-0094 HIGH 7.5 Microsoft Edge 2017-03-17 A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…	HIGH 7.5	—	Microsoft Edge	2017-03-17

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM