Vulnerabilities
Tracked app vulnerabilities
19,910 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,910
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-27
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-0677
HIGH · vendor
Windows Key Isolation Service Information Disclosure Vulnerability |
|
CVE-2020-0676
HIGH · vendor
Windows Key Isolation Service Information Disclosure Vulnerability |
|
CVE-2020-0675
HIGH · vendor
Windows Key Isolation Service Information Disclosure Vulnerability |
|
CVE-2020-0672
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-0671
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-0670
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-0669
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-0668
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-0667
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0666
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0665
HIGH · vendor
Active Directory Elevation of Privilege Vulnerability |
|
CVE-2020-0662
CRITICAL · vendor
Internet Connection Sharing Service Remote Code Execution Vulnerability |
|
CVE-2020-0661
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2020-0660
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability |
|
CVE-2020-0659
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2020-0658
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2020-0657
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2020-0655
HIGH · vendor
Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2010-3917
Google Chrome before 3.0 does not properly handle XML documents, which allows remote attackers to obtain sensitive information via a crafted web site. |
|
CVE-2019-9674
Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb. |
|
CVE-2020-8492
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression … |
|
CVE-2020-8315
In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacke… |
|
CVE-2020-0652
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office M… |
|
CVE-2020-0651
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2020-0650
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2020-0638
An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first … |
|
CVE-2019-13722
Inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
|
CVE-2020-0644
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-0643
HIGH · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2020-0642
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-0641
HIGH · vendor
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2020-0639
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2020-0637
HIGH · vendor
Remote Desktop Web Access Information Disclosure Vulnerability |
|
CVE-2020-0636
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2020-0635
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-0634
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2020-0633
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0632
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0631
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0630
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0629
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0628
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0627
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0626
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0625
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0624
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-0623
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0622
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-0621
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2020-0620
HIGH · vendor
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.