Vulnerabilities
Tracked app vulnerabilities
12,531 CVEs affect a tracked app or OS (High, Windows). 246 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 12,531
- Actively exploited
- 246
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2016-7201
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
|
CVE-2016-7200
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
|
CVE-2016-7198
HIGH 7.5
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… |
|
CVE-2016-7196
HIGH 7.5
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via … |
|
CVE-2016-7195
HIGH 7.5
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… |
|
CVE-2016-7247
HIGH · vendor
Secure Boot Component Security Feature Bypass Vulnerability |
|
CVE-2016-7246
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-7238
HIGH · vendor
Windows NTLM Elevation of Privilege Vulnerability |
|
CVE-2016-7237
HIGH · vendor
Local Security Authority Subsystem Service Denial of Service Vulnerability |
|
CVE-2016-7226
HIGH · vendor
VHD Driver Elevation of Privilege Vulnerability |
|
CVE-2016-7225
HIGH · vendor
VHD Driver Elevation of Privilege Vulnerability |
|
CVE-2016-7224
HIGH · vendor
VHD Driver Elevation of Privilege Vulnerability |
|
CVE-2016-7223
HIGH · vendor
VHD Driver Elevation of Privilege Vulnerability |
|
CVE-2016-7222
HIGH · vendor
Task Scheduler Elevation of Privilege Vulnerability |
|
CVE-2016-7221
HIGH · vendor
Windows IME Elevation of Privilege Vulnerability |
|
CVE-2016-7218
HIGH · vendor
Windows Bowser.sys Information Disclosure Vulnerability |
|
CVE-2016-7217
HIGH · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2016-7215
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-7214
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2016-7210
HIGH · vendor
Open Type Font Information Disclosure Vulnerability |
|
CVE-2016-7184
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2016-3343
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2016-3342
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2016-3340
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2016-3338
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2016-3335
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2016-3334
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2016-3333
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2016-3332
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2016-0026
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2016-7194
HIGH 7.5
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… |
|
CVE-2016-7193
HIGH 7.8
KEV
Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… |
|
CVE-2016-7190
HIGH 7.5
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… |
|
CVE-2016-7189
HIGH 7.5
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Exec… |
|
CVE-2016-3390
HIGH 7.5
The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memor… |
|
CVE-2016-3389
HIGH 7.5
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… |
|
CVE-2016-3387
HIGH 7.5
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privilege… |
|
CVE-2016-3386
HIGH 7.5
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… |
|
CVE-2016-3382
HIGH 7.5
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of serv… |
|
CVE-2016-3331
HIGH 7.5
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft… |
|
CVE-2016-7211
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-7188
HIGH · vendor
Windows Diagnostics Hub Elevation of Privilege Vulnerability |
|
CVE-2016-7185
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-7182
HIGH · vendor
Graphics Component Font Parsing Elevation of Privilege Vulnerability |
|
CVE-2016-3376
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-3341
HIGH · vendor
Windows Transaction Manager Elevation of Privilege Vulnerability |
|
CVE-2016-3270
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-3266
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-3263
HIGH · vendor
GDI+ Information Disclosure Vulnerability |
|
CVE-2016-3262
HIGH · vendor
GDI+ Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.