Vulnerabilities
Tracked app vulnerabilities
19,910 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,910
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-27
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-0617
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2020-0616
HIGH · vendor
Microsoft Windows Denial of Service Vulnerability |
|
CVE-2020-0615
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2020-0614
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0613
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0612
HIGH · vendor
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2020-0611
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2020-0610
CRITICAL · vendor
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
|
CVE-2020-0609
CRITICAL · vendor
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
|
CVE-2020-0608
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2020-0607
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-0601
Windows CryptoAPI Spoofing Vulnerability |
|
CVE-2020-6377
HIGH 8.8
Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13767
HIGH 8.8
Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
|
CVE-2019-17012
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evidence of memory corruption and we presu… |
|
CVE-2019-17011
HIGH 7.5
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a po… |
|
CVE-2019-17010
HIGH 7.5
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-f… |
|
CVE-2019-17009
HIGH 7.8
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a … |
|
CVE-2019-17008
HIGH 8.8
When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vulnerability affects… |
|
CVE-2019-17005
HIGH 8.8
The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the static-sized array … |
|
CVE-2019-11764
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of these bugs showed evidence of memory c… |
|
CVE-2019-11763
MEDIUM 6.1
Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities. This could have led to HTML commen… |
|
CVE-2019-11762
MEDIUM 6.1
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/getters/setters on … |
|
CVE-2019-11761
MEDIUM 5.4
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this o… |
|
CVE-2019-11760
HIGH 8.8
A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some instances. This vuln… |
|
CVE-2019-11759
HIGH 8.8
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an attacker to execute a… |
|
CVE-2019-11758
HIGH 8.8
Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was installed. This bug showed evidence of memory c… |
|
CVE-2019-11757
HIGH 8.8
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use… |
|
CVE-2019-11745
HIGH 8.8
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. Th… |
|
CVE-2019-5846
MEDIUM 6.5
Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2019-5845
MEDIUM 6.5
Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2019-5844
MEDIUM 6.5
Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2019-13766
MEDIUM 6.5
Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13765
MEDIUM 6.5
Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
|
CVE-2019-1387
CRITICAL · vendor
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are cu… |
|
CVE-2019-8801
HIGH 7.8
A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes… |
|
CVE-2019-8745
HIGH 8.8
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.10.1, iCloud for Win… |
|
CVE-2019-8735
HIGH 8.8
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows … |
|
CVE-2019-8733
HIGH 8.8
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows … |
|
CVE-2019-8726
HIGH 8.8
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows … |
|
CVE-2019-8719
MEDIUM 6.1
A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Win… |
|
CVE-2019-8707
HIGH 8.8
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows … |
|
CVE-2019-8625
MEDIUM 6.1
A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Win… |
|
CVE-2019-1464
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosur… |
|
CVE-2019-1462
HIGH 7.8
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft Powe… |
|
CVE-2019-1461
MEDIUM 6.5
A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of… |
|
CVE-2019-1458
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
|
CVE-2019-13764
HIGH 8.8
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13763
MEDIUM 4.3
Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak c… |
|
CVE-2019-13762
LOW 3.3
Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local cod… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.