Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,910 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,910
Actively exploited
303
Publication window
1997-01-01 → 2026-10-27

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,910 entries Windows Clear all
CVE
CVE-2020-15963
CRITICAL 9.6

Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension…

CVE-2020-15962
HIGH 8.8

Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access v…

CVE-2020-15961
CRITICAL 9.6

Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension …

CVE-2020-15960
HIGH 8.8

Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a craf…

CVE-2020-15959
MEDIUM 4.3

Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain po…

CVE-2020-1594
HIGH 7.8

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…

CVE-2020-1335
HIGH 7.8

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…

CVE-2020-1332
HIGH 7.8

<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who succe…

CVE-2020-1224
MEDIUM 5.5

<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerabi…

CVE-2020-1218
HIGH 7.8

<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exp…

CVE-2020-1180
MEDIUM 4.2

<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memo…

CVE-2020-1172
MEDIUM 4.2

<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memo…

CVE-2020-1057
MEDIUM 4.2

<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memo…

CVE-2020-16884
MEDIUM 4.2

<p>A remote code execution vulnerability exists in the way that the IEToEdge Browser Helper Object (BHO) plugin on Internet Explorer handles objects in memory.…

CVE-2020-16853
HIGH 7.1

<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf…

CVE-2020-16852
HIGH 7.1

<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf…

CVE-2020-16851
HIGH 7.1

<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successf…

CVE-2020-0878
MEDIUM 4.2 KEV

<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way th…

CVE-2020-16879
HIGH · vendor

Projected Filesystem Information Disclosure Vulnerability

CVE-2020-16854
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2020-1598
HIGH · vendor

Windows UPnP Service Elevation of Privilege Vulnerability

CVE-2020-1596
HIGH · vendor

TLS Information Disclosure Vulnerability

CVE-2020-1593
CRITICAL · vendor

Windows Media Audio Decoder Remote Code Execution Vulnerability

CVE-2020-1592
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2020-1590
HIGH · vendor

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

CVE-2020-1589
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2020-1559
HIGH · vendor

Windows Storage Services Elevation of Privilege Vulnerability

CVE-2020-1532
HIGH · vendor

Windows InstallService Elevation of Privilege Vulnerability

CVE-2020-1508
CRITICAL · vendor

Windows Media Audio Decoder Remote Code Execution Vulnerability

CVE-2020-1507
HIGH · vendor

Microsoft COM for Windows Elevation of Privilege Vulnerability

CVE-2020-1491
HIGH · vendor

Windows Function Discovery Service Elevation of Privilege Vulnerability

CVE-2020-1471
HIGH · vendor

Windows CloudExperienceHost Elevation of Privilege Vulnerability

CVE-2020-1376
HIGH · vendor

Windows Elevation of Privilege Vulnerability

CVE-2020-1319
CRITICAL · vendor

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

CVE-2020-1308
HIGH · vendor

DirectX Elevation of Privilege Vulnerability

CVE-2020-1303
HIGH · vendor

Windows Runtime Elevation of Privilege Vulnerability

CVE-2020-1285
CRITICAL · vendor

GDI+ Remote Code Execution Vulnerability

CVE-2020-1256
HIGH · vendor

Windows GDI Information Disclosure Vulnerability

CVE-2020-1252
CRITICAL · vendor

Windows Remote Code Execution Vulnerability

CVE-2020-1250
HIGH · vendor

Win32k Information Disclosure Vulnerability

CVE-2020-1245
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2020-1228
HIGH · vendor

Windows DNS Denial of Service Vulnerability

CVE-2020-1169
HIGH · vendor

Windows Runtime Elevation of Privilege Vulnerability

CVE-2020-1159
HIGH · vendor

Windows Elevation of Privilege Vulnerability

CVE-2020-1152
HIGH · vendor

Windows Win32k Elevation of Privilege Vulnerability

CVE-2020-1146
HIGH · vendor

Microsoft Store Runtime Elevation of Privilege Vulnerability

CVE-2020-1133
HIGH · vendor

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

CVE-2020-1130
HIGH · vendor

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

CVE-2020-1129
CRITICAL · vendor

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

CVE-2020-1122
HIGH · vendor

Windows Language Pack Installer Elevation of Privilege Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM