Vulnerabilities
Tracked app vulnerabilities
1,726 CVEs affect a tracked app or OS (Critical, Windows). 37 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 1,726
- Actively exploited
- 37
- Publication window
- 2007-08-28 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-0997
CRITICAL · vendor
Windows Camera Codec Pack Remote Code Execution Vulnerability |
|
CVE-2020-0922
CRITICAL · vendor
Microsoft COM for Windows Remote Code Execution Vulnerability |
|
CVE-2020-0908
CRITICAL · vendor
Windows Text Service Module Remote Code Execution Vulnerability |
|
CVE-2020-1585
CRITICAL · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2020-1560
CRITICAL · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2020-1554
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1525
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1492
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1477
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability |
|
CVE-2020-1379
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1339
CRITICAL · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2020-6522
CRITICAL 9.6
Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox es… |
|
CVE-2020-6509
CRITICAL 9.6
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially p… |
|
CVE-2020-6505
CRITICAL 9.6
Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
|
CVE-2020-15801
CRITICAL 9.8
In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name… |
|
CVE-2020-1436
CRITICAL · vendor
Windows Font Library Remote Code Execution Vulnerability |
|
CVE-2020-1435
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-1421
CRITICAL · vendor
LNK Remote Code Execution Vulnerability |
|
CVE-2020-1410
CRITICAL · vendor
Windows Address Book Remote Code Execution Vulnerability |
|
CVE-2020-1409
CRITICAL · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2020-1374
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2020-1350
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2020-1043
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1042
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1041
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1040
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1036
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1032
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1425
CRITICAL · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2020-1300
CRITICAL · vendor
Windows Remote Code Execution Vulnerability |
|
CVE-2020-1299
CRITICAL · vendor
LNK Remote Code Execution Vulnerability |
|
CVE-2020-1286
CRITICAL · vendor
Windows Shell Remote Code Execution Vulnerability |
|
CVE-2020-1281
CRITICAL · vendor
Windows OLE Remote Code Execution Vulnerability |
|
CVE-2020-1248
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-6109
CRITICAL 9.8
An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat mess… |
|
CVE-2020-6493
CRITICAL 9.6
Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially pe… |
|
CVE-2020-6831
CRITICAL 9.8
A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. … |
|
CVE-2020-12395
CRITICAL 9.8
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed evidence of memory c… |
|
CVE-2020-0901
CRITICAL 9.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successf… |
|
CVE-2020-6471
CRITICAL 9.6
Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious exten… |
|
CVE-2020-6469
CRITICAL 9.6
Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious exten… |
|
CVE-2020-6466
CRITICAL 9.6
Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sand… |
|
CVE-2020-6465
CRITICAL 9.6
Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potential… |
|
CVE-2020-6462
CRITICAL 9.6
Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially per… |
|
CVE-2020-6461
CRITICAL 9.6
Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
|
CVE-2020-6457
CRITICAL 9.6
Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM… |
|
CVE-2020-6825
CRITICAL 9.8
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these… |
|
CVE-2020-1020
Adobe Font Manager Library Remote Code Execution Vulnerability |
|
CVE-2020-0965
CRITICAL · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.