Vulnerabilities
Tracked app vulnerabilities
19,931 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,931
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-1346
HIGH · vendor
Windows Denial of Service Vulnerability |
|
CVE-2019-1345
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1344
HIGH · vendor
Windows Code Integrity Module Information Disclosure Vulnerability |
|
CVE-2019-1343
HIGH · vendor
Windows Denial of Service Vulnerability |
|
CVE-2019-1342
HIGH · vendor
Windows Error Reporting Manager Elevation of Privilege Vulnerability |
|
CVE-2019-1341
HIGH · vendor
Windows Power Service Elevation of Privilege Vulnerability |
|
CVE-2019-1340
HIGH · vendor
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1339
HIGH · vendor
Windows Error Reporting Manager Elevation of Privilege Vulnerability |
|
CVE-2019-1337
HIGH · vendor
Windows Update Client Information Disclosure Vulnerability |
|
CVE-2019-1336
HIGH · vendor
Microsoft Windows Update Client Elevation of Privilege Vulnerability |
|
CVE-2019-1334
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1333
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-1326
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability |
|
CVE-2019-1325
HIGH · vendor
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability |
|
CVE-2019-1323
HIGH · vendor
Microsoft Windows Update Client Elevation of Privilege Vulnerability |
|
CVE-2019-1322
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1321
HIGH · vendor
Microsoft Windows CloudStore Elevation of Privilege Vulnerability |
|
CVE-2019-1320
HIGH · vendor
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1319
HIGH · vendor
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2019-1318
HIGH · vendor
Microsoft Windows Transport Layer Security Spoofing Vulnerability |
|
CVE-2019-1317
HIGH · vendor
Microsoft Windows Denial of Service Vulnerability |
|
CVE-2019-1316
HIGH · vendor
Microsoft Windows Setup Elevation of Privilege Vulnerability |
|
CVE-2019-1315
Windows Error Reporting Manager Elevation of Privilege Vulnerability |
|
CVE-2019-1311
HIGH · vendor
Windows Imaging API Remote Code Execution Vulnerability |
|
CVE-2019-1230
HIGH · vendor
Hyper-V Information Disclosure Vulnerability |
|
CVE-2019-1166
HIGH · vendor
Windows NTLM Tampering Vulnerability |
|
CVE-2019-1060
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-16935
MEDIUM 6.1
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/Do… |
|
CVE-2019-11755
HIGH 7.5
A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the sign… |
|
CVE-2019-11752
HIGH 8.8
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion. This results in a use-after-free and a potentially exploi… |
|
CVE-2019-11746
HIGH 8.8
A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable c… |
|
CVE-2019-11744
MEDIUM 6.1
Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating them as markup. It is possible to pass a li… |
|
CVE-2019-11743
LOW 3.7
Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts … |
|
CVE-2019-11742
MEDIUM 6.5
A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a <canvas> element due to an err… |
|
CVE-2019-11740
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8. Some of these bugs showed evidenc… |
|
CVE-2019-11739
MEDIUM 6.5
Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunde… |
|
CVE-2019-8075
HIGH 7.5
Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Di… |
|
CVE-2019-1300
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1299
MEDIUM 6.5
An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge H… |
|
CVE-2019-1298
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1297
HIGH 8.8
KEV
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2019-1263
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosur… |
|
CVE-2019-1237
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1220
MEDIUM 4.3
A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft… |
|
CVE-2019-1217
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1138
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-1303
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1294
HIGH · vendor
Windows Secure Boot Security Feature Bypass Vulnerability |
|
CVE-2019-1293
HIGH · vendor
Windows SMB Client Driver Information Disclosure Vulnerability |
|
CVE-2019-1292
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.