Vulnerabilities
Tracked app vulnerabilities
19,910 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,910
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-27
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-1529
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2020-1528
HIGH · vendor
Windows Radio Manager API Elevation of Privilege Vulnerability |
|
CVE-2020-1527
HIGH · vendor
Windows Custom Protocol Engine Elevation of Privilege Vulnerability |
|
CVE-2020-1526
HIGH · vendor
Windows Network Connection Broker Elevation of Privilege Vulnerability |
|
CVE-2020-1525
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1524
HIGH · vendor
Windows Speech Shell Components Elevation of Privilege Vulnerability |
|
CVE-2020-1522
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1521
HIGH · vendor
Windows Speech Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1520
HIGH · vendor
Windows Font Driver Host Remote Code Execution Vulnerability |
|
CVE-2020-1519
HIGH · vendor
Windows UPnP Device Host Elevation of Privilege Vulnerability |
|
CVE-2020-1518
HIGH · vendor
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2020-1517
HIGH · vendor
Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2020-1516
HIGH · vendor
Windows Work Folders Service Elevation of Privilege Vulnerability |
|
CVE-2020-1515
HIGH · vendor
Windows Telephony Server Elevation of Privilege Vulnerability |
|
CVE-2020-1513
HIGH · vendor
Windows CSC Service Elevation of Privilege Vulnerability |
|
CVE-2020-1512
HIGH · vendor
Windows State Repository Service Information Disclosure Vulnerability |
|
CVE-2020-1511
HIGH · vendor
Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability |
|
CVE-2020-1510
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2020-1509
HIGH · vendor
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability |
|
CVE-2020-1492
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1490
HIGH · vendor
Windows Storage Service Elevation of Privilege Vulnerability |
|
CVE-2020-1489
HIGH · vendor
Windows CSC Service Elevation of Privilege Vulnerability |
|
CVE-2020-1488
HIGH · vendor
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability |
|
CVE-2020-1487
HIGH · vendor
Media Foundation Information Disclosure Vulnerability |
|
CVE-2020-1486
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-1485
HIGH · vendor
Windows Image Acquisition Service Information Disclosure Vulnerability |
|
CVE-2020-1484
HIGH · vendor
Windows Work Folders Service Elevation of Privilege Vulnerability |
|
CVE-2020-1480
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2020-1479
HIGH · vendor
DirectX Elevation of Privilege Vulnerability |
|
CVE-2020-1478
HIGH · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1477
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1475
HIGH · vendor
Windows Server Resource Management Service Elevation of Privilege Vulnerability |
|
CVE-2020-1474
HIGH · vendor
Windows Image Acquisition Service Information Disclosure Vulnerability |
|
CVE-2020-1473
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability |
|
CVE-2020-1470
HIGH · vendor
Windows Work Folders Service Elevation of Privilege Vulnerability |
|
CVE-2020-1467
HIGH · vendor
Windows Hard Link Elevation of Privilege Vulnerability |
|
CVE-2020-1466
HIGH · vendor
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2020-1464
Windows Spoofing Vulnerability |
|
CVE-2020-1459
HIGH · vendor
Windows ARM Information Disclosure Vulnerability |
|
CVE-2020-1417
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-1383
HIGH · vendor
Windows RRAS Service Information Disclosure Vulnerability |
|
CVE-2020-1379
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-1378
HIGH · vendor
Windows Registry Elevation of Privilege Vulnerability |
|
CVE-2020-1377
HIGH · vendor
Windows Registry Elevation of Privilege Vulnerability |
|
CVE-2020-1339
CRITICAL · vendor
Windows Media Remote Code Execution Vulnerability |
|
CVE-2020-1337
HIGH · vendor
Windows Print Spooler Elevation of Privilege Vulnerability |
|
CVE-2020-15659
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory c… |
|
CVE-2020-15658
MEDIUM 6.5
The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier p… |
|
CVE-2020-15657
HIGH 7.8
Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files i… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.