Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-0071
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0070
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0067
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0053
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word Viewer allow remot… |
|
CVE-2017-0052
Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbit… |
|
CVE-2017-0035
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0034
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in a way that en… |
|
CVE-2017-0032
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0031
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial o… |
|
CVE-2017-0030
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on ShareP… |
|
CVE-2017-0023
HIGH 7.5
The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute a… |
|
CVE-2017-0020
Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial… |
|
CVE-2017-0019
Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft O… |
|
CVE-2017-0015
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0010
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0006
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbit… |
|
CVE-2016-10196
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service … |
|
CVE-2017-0147
Windows SMB Information Disclosure Vulnerability |
|
CVE-2017-0121
HIGH · vendor
Windows Uniscribe Information Disclosure Vulnerability |
|
CVE-2017-0118
HIGH · vendor
Windows Uniscribe Information Disclosure Vulnerability |
|
CVE-2017-0102
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2017-0100
HIGH · vendor
Windows COM Session Elevation of Privilege Vulnerability |
|
CVE-2017-0099
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0098
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0097
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0096
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2017-0095
HIGH · vendor
Hyper-V vSMB Remote Code Execution Vulnerability |
|
CVE-2017-0082
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0081
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0080
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0079
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0078
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0076
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0074
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0073
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0063
HIGH · vendor
Microsoft Color Management Information Disclosure Vulnerability |
|
CVE-2017-0062
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0060
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0057
HIGH · vendor
Windows DNS Query Information Disclosure Vulnerability |
|
CVE-2017-0056
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2017-0055
HIGH · vendor
Microsoft IIS Server XSS Elevation of Privilege Vulnerability |
|
CVE-2017-0051
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0050
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2017-0047
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2017-0043
HIGH · vendor
Microsoft Active Directory Federation Services Information Disclosure |
|
CVE-2017-0042
HIGH · vendor
Windows DirectShow Information Disclosure Vulnerability |
|
CVE-2017-0038
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0026
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0025
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2017-0024
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.