Vulnerabilities
Tracked app vulnerabilities
19,910 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,910
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-27
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-1374
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2020-1373
HIGH · vendor
Windows Network Connections Service Elevation of Privilege Vulnerability |
|
CVE-2020-1372
HIGH · vendor
Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability |
|
CVE-2020-1371
HIGH · vendor
Windows Event Logging Service Elevation of Privilege Vulnerability |
|
CVE-2020-1370
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1369
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2020-1368
HIGH · vendor
Windows Credential Enrollment Manager Service Elevation of Privilege Vulnerability |
|
CVE-2020-1367
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2020-1366
HIGH · vendor
Windows Print Workflow Service Elevation of Privilege Vulnerability |
|
CVE-2020-1365
HIGH · vendor
Windows Event Logging Service Elevation of Privilege Vulnerability |
|
CVE-2020-1364
HIGH · vendor
Windows WalletService Denial of Service Vulnerability |
|
CVE-2020-1363
HIGH · vendor
Windows Picker Platform Elevation of Privilege Vulnerability |
|
CVE-2020-1362
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2020-1361
HIGH · vendor
Windows WalletService Information Disclosure Vulnerability |
|
CVE-2020-1360
HIGH · vendor
Windows Profile Service Elevation of Privilege Vulnerability |
|
CVE-2020-1359
HIGH · vendor
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
|
CVE-2020-1358
HIGH · vendor
Windows Resource Policy Information Disclosure Vulnerability |
|
CVE-2020-1357
HIGH · vendor
Windows System Events Broker Elevation of Privilege Vulnerability |
|
CVE-2020-1356
HIGH · vendor
Windows iSCSI Target Service Elevation of Privilege Vulnerability |
|
CVE-2020-1355
HIGH · vendor
Windows Font Driver Host Remote Code Execution Vulnerability |
|
CVE-2020-1354
HIGH · vendor
Windows UPnP Device Host Elevation of Privilege Vulnerability |
|
CVE-2020-1353
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1352
HIGH · vendor
Windows USO Core Worker Elevation of Privilege Vulnerability |
|
CVE-2020-1351
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-1350
Windows DNS Server Remote Code Execution Vulnerability |
|
CVE-2020-1347
HIGH · vendor
Windows Storage Services Elevation of Privilege Vulnerability |
|
CVE-2020-1346
HIGH · vendor
Windows Modules Installer Elevation of Privilege Vulnerability |
|
CVE-2020-1344
HIGH · vendor
Windows WalletService Elevation of Privilege Vulnerability |
|
CVE-2020-1336
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-1333
HIGH · vendor
Group Policy Services Policy Processing Elevation of Privilege Vulnerability |
|
CVE-2020-1330
HIGH · vendor
Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability |
|
CVE-2020-1267
HIGH · vendor
Local Security Authority Subsystem Service Denial of Service Vulnerability |
|
CVE-2020-1249
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1085
HIGH · vendor
Windows Function Discovery Service Elevation of Privilege Vulnerability |
|
CVE-2020-1043
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1042
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1041
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1040
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1036
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2020-1032
CRITICAL · vendor
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability |
|
CVE-2019-20907
HIGH 7.5
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pa… |
|
CVE-2020-12421
MEDIUM 6.5
When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.) … |
|
CVE-2020-12420
HIGH 8.8
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially explo… |
|
CVE-2020-12419
HIGH 8.8
When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-free condition. This c… |
|
CVE-2020-12418
MEDIUM 6.5
Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This vulnerability affec… |
|
CVE-2020-12417
HIGH 8.8
Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitab… |
|
CVE-2020-12406
HIGH 8.8
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it… |
|
CVE-2020-12405
MEDIUM 5.3
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects… |
|
CVE-2020-12399
MEDIUM 4.4
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thund… |
|
CVE-2020-12398
HIGH 7.5
If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted co… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.