Vulnerabilities
Tracked app vulnerabilities
1,726 CVEs affect a tracked app or OS (Critical, Windows). 37 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 1,726
- Actively exploited
- 37
- Publication window
- 2007-08-28 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-0950
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0949
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0948
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0938
Adobe Font Manager Library Remote Code Execution Vulnerability |
|
CVE-2020-0910
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2020-0907
CRITICAL · vendor
Microsoft Graphics Components Remote Code Execution Vulnerability |
|
CVE-2020-0687
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2020-6814
CRITICAL 9.8
Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evidence of memory corruption and we presume … |
|
CVE-2020-0796
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S… |
|
CVE-2020-0883
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-0881
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-0869
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0809
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0807
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0801
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0684
CRITICAL · vendor
LNK Remote Code Execution Vulnerability |
|
CVE-2014-4650
CRITICAL 9.8
The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attacke… |
|
CVE-2020-0817
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2020-0738
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0734
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2020-0729
CRITICAL · vendor
LNK Remote Code Execution Vulnerability |
|
CVE-2020-0681
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2020-0662
CRITICAL · vendor
Internet Connection Sharing Service Remote Code Execution Vulnerability |
|
CVE-2020-0611
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2020-0610
CRITICAL · vendor
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
|
CVE-2020-0609
CRITICAL · vendor
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
|
CVE-2019-1387
CRITICAL · vendor
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are cu… |
|
CVE-2019-1471
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-1468
CRITICAL · vendor
Win32k Graphics Remote Code Execution Vulnerability |
|
CVE-2019-5870
CRITICAL 9.6
Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
|
CVE-2019-5866
CRITICAL 9.8
Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
|
CVE-2019-5850
CRITICAL 9.6
Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform… |
|
CVE-2016-9652
CRITICAL 9.8
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75. |
|
CVE-2016-5194
CRITICAL 9.8
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59. |
|
CVE-2019-1430
CRITICAL · vendor
Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
|
CVE-2019-1419
CRITICAL · vendor
OpenType Font Parsing Remote Code Execution Vulnerability |
|
CVE-2019-1398
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-1397
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-1389
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-0721
CRITICAL · vendor
Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-0719
CRITICAL · vendor
Hyper-V Remote Code Execution Vulnerability |
|
CVE-2016-5202
CRITICAL 9.1
browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux n… |
|
CVE-2019-1333
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-1060
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-1291
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-1290
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-1280
CRITICAL · vendor
LNK Remote Code Execution Vulnerability |
|
CVE-2019-0788
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-0787
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-1226
CRITICAL · vendor
Remote Desktop Services Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.