Vulnerabilities
Tracked app vulnerabilities
19,931 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,931
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-1291
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-1290
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-1289
HIGH · vendor
Windows Update Delivery Optimization Elevation of Privilege Vulnerability |
|
CVE-2019-1287
HIGH · vendor
Windows Network Connectivity Assistant Elevation of Privilege Vulnerability |
|
CVE-2019-1286
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1285
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1282
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2019-1280
CRITICAL · vendor
LNK Remote Code Execution Vulnerability |
|
CVE-2019-1278
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1277
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1274
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1273
HIGH · vendor
Active Directory Federation Services XSS Vulnerability |
|
CVE-2019-1272
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-1271
HIGH · vendor
Windows Media Elevation of Privilege Vulnerability |
|
CVE-2019-1270
HIGH · vendor
Microsoft Windows Store Installer Elevation of Privilege Vulnerability |
|
CVE-2019-1269
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2019-1268
HIGH · vendor
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2019-1267
HIGH · vendor
Microsoft Compatibility Appraiser Elevation of Privilege Vulnerability |
|
CVE-2019-1256
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1254
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2019-1253
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1252
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1251
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1250
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1249
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1248
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1247
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1246
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1245
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1244
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1243
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1242
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1241
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1240
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1235
HIGH · vendor
Windows Text Service Framework Elevation of Privilege Vulnerability |
|
CVE-2019-1232
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2019-1219
HIGH · vendor
Windows Transaction Manager Information Disclosure Vulnerability |
|
CVE-2019-1216
HIGH · vendor
DirectX Information Disclosure Vulnerability |
|
CVE-2019-1215
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1214
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2019-0928
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-0788
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-0787
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-16056
HIGH 7.5
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addres… |
|
CVE-2019-15903
HIGH 7.5
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCu… |
|
CVE-2019-1204
MEDIUM 4.3
An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting… |
|
CVE-2019-1201
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploi… |
|
CVE-2019-1200
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exp… |
|
CVE-2019-1197
MEDIUM 4.2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-1196
MEDIUM 4.2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.