Vulnerabilities
Tracked app vulnerabilities
19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,930
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-0846
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0845
CRITICAL · vendor
Windows IOleCvt Interface Remote Code Execution Vulnerability |
|
CVE-2019-0844
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0842
HIGH · vendor
Windows VBScript Engine Remote Code Execution Vulnerability |
|
CVE-2019-0841
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0840
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0839
HIGH · vendor
Windows Information Disclosure Vulnerability |
|
CVE-2019-0838
HIGH · vendor
Windows Information Disclosure Vulnerability |
|
CVE-2019-0837
HIGH · vendor
DirectX Information Disclosure Vulnerability |
|
CVE-2019-0836
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0814
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2019-0805
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0803
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-0802
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-0796
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0795
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-0794
HIGH · vendor
OLE Automation Remote Code Execution Vulnerability |
|
CVE-2019-0793
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-0792
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-0791
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-0790
CRITICAL · vendor
MS XML Remote Code Execution Vulnerability |
|
CVE-2019-0786
CRITICAL · vendor
Hyper-V vSMB Remote Code Execution Vulnerability |
|
CVE-2019-0735
HIGH · vendor
Windows CSRSS Elevation of Privilege Vulnerability |
|
CVE-2019-0732
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2019-0731
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0730
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-0688
HIGH · vendor
Windows TCP/IP Information Disclosure Vulnerability |
|
CVE-2019-0685
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-0780
HIGH 7.5
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerabilit… |
|
CVE-2019-0779
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. |
|
CVE-2019-0773
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0771
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0770
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0769
HIGH 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
|
CVE-2019-0762
MEDIUM 4.3
A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft Browsers Security Featur… |
|
CVE-2019-0746
MEDIUM 6.5
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine In… |
|
CVE-2019-0678
MEDIUM 6.8
An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access inf… |
|
CVE-2019-0612
MEDIUM 5.3
A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerabil… |
|
CVE-2019-0611
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-0609
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corr… |
|
CVE-2019-0592
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
|
CVE-2019-9948
CRITICAL 9.1
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist … |
|
CVE-2019-9947
MEDIUM 6.1
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a u… |
|
CVE-2019-9740
MEDIUM 6.1
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a u… |
|
CVE-2019-5922
HIGH 7.8
Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified director… |
|
CVE-2019-0821
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2019-0797
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-0784
CRITICAL · vendor
Windows ActiveX Remote Code Execution Vulnerability |
|
CVE-2019-0782
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0776
HIGH · vendor
Win32k Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.