Vulnerabilities
Tracked app vulnerabilities
19,910 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,910
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-27
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-0983
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-0982
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-0981
HIGH · vendor
Windows Token Security Feature Bypass Vulnerability |
|
CVE-2020-0965
CRITICAL · vendor
Microsoft Windows Codecs Library Remote Code Execution Vulnerability |
|
CVE-2020-0964
HIGH · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-0962
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2020-0960
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-0959
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-0958
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-0956
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-0955
HIGH · vendor
Windows Kernel Information Disclosure in CPU Memory Access |
|
CVE-2020-0953
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-0952
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2020-0950
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0949
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0948
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0947
HIGH · vendor
Media Foundation Information Disclosure Vulnerability |
|
CVE-2020-0946
HIGH · vendor
Media Foundation Information Disclosure Vulnerability |
|
CVE-2020-0945
HIGH · vendor
Media Foundation Information Disclosure Vulnerability |
|
CVE-2020-0944
HIGH · vendor
Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability |
|
CVE-2020-0942
HIGH · vendor
Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability |
|
CVE-2020-0940
HIGH · vendor
Windows Push Notification Service Elevation of Privilege Vulnerability |
|
CVE-2020-0939
HIGH · vendor
Media Foundation Information Disclosure Vulnerability |
|
CVE-2020-0938
Adobe Font Manager Library Remote Code Execution Vulnerability |
|
CVE-2020-0937
HIGH · vendor
Media Foundation Information Disclosure Vulnerability |
|
CVE-2020-0936
HIGH · vendor
Windows Scheduled Task Elevation of Privilege Vulnerability |
|
CVE-2020-0934
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-0918
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2020-0917
HIGH · vendor
Windows Hyper-V Elevation of Privilege Vulnerability |
|
CVE-2020-0913
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-0910
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2020-0907
CRITICAL · vendor
Microsoft Graphics Components Remote Code Execution Vulnerability |
|
CVE-2020-0889
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-0888
HIGH · vendor
DirectX Elevation of Privilege Vulnerability |
|
CVE-2020-0821
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2020-0794
HIGH · vendor
Windows Denial of Service Vulnerability |
|
CVE-2020-0784
HIGH · vendor
DirectX Elevation of Privilege Vulnerability |
|
CVE-2020-0699
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2020-0687
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2020-6456
MEDIUM 6.5
Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attacker to bypass site isolation via crafted cl… |
|
CVE-2020-6455
HIGH 8.8
Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-6454
HIGH 8.8
Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to potentially ex… |
|
CVE-2020-6452
HIGH 8.8
Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-6451
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-6450
HIGH 8.8
Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-6448
HIGH 8.8
Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2020-6447
HIGH 8.8
Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to … |
|
CVE-2020-6446
MEDIUM 6.5
Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a craft… |
|
CVE-2020-6445
MEDIUM 6.5
Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a craft… |
|
CVE-2020-6444
MEDIUM 6.3
Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.