Vulnerabilities
Tracked app vulnerabilities
19,931 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,931
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-1417
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-1416
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2019-1415
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2019-1411
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1409
HIGH · vendor
Windows Remote Procedure Call Information Disclosure Vulnerability |
|
CVE-2019-1408
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1407
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2019-1406
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1399
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-1398
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-1397
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-1396
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1395
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1394
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1393
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1391
HIGH · vendor
Windows Denial of Service Vulnerability |
|
CVE-2019-1389
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-1388
Windows Certificate Dialog Elevation of Privilege Vulnerability |
|
CVE-2019-1384
HIGH · vendor
Microsoft Windows Security Feature Bypass Vulnerability |
|
CVE-2019-1383
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-1382
HIGH · vendor
Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability |
|
CVE-2019-1381
HIGH · vendor
Microsoft Windows Information Disclosure Vulnerability |
|
CVE-2019-1380
HIGH · vendor
Microsoft splwow64 Elevation of Privilege Vulnerability |
|
CVE-2019-1379
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-1374
HIGH · vendor
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2019-1324
HIGH · vendor
Windows TCP/IP Information Disclosure Vulnerability |
|
CVE-2019-1310
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-1309
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-0721
CRITICAL · vendor
Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-0719
CRITICAL · vendor
Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-0712
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2018-12207
HIGH · vendor
Windows Denial of Service Vulnerability |
|
CVE-2019-5010
HIGH 7.5
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate … |
|
CVE-2016-5202
CRITICAL 9.1
browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux n… |
|
CVE-2019-18348
MEDIUM 6.1
An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a u… |
|
CVE-2019-17514
HIGH 7.5
library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether sorting occurs, as demonstrated by irrep… |
|
CVE-2019-1366
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1357
MEDIUM 4.3
A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka 'Microsoft Browser Spoofing Vulnerability'. This CVE ID is uniqu… |
|
CVE-2019-1356
MEDIUM 6.5
An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge H… |
|
CVE-2019-1335
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1331
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2019-1327
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2019-1308
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1307
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0608
MEDIUM 4.3
A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spoofing Vulnerability'. This CVE ID is un… |
|
CVE-2019-1368
HIGH · vendor
Windows Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2019-1365
HIGH · vendor
Microsoft IIS Server Elevation of Privilege Vulnerability |
|
CVE-2019-1359
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1358
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1347
HIGH · vendor
Windows Denial of Service Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.