Vulnerabilities
Tracked app vulnerabilities
19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,930
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-16079
MEDIUM 5.3
A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to spoof the contents o… |
|
CVE-2018-16078
MEDIUM 6.5
Unsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain potentially sensitive information… |
|
CVE-2018-16076
HIGH 8.8
Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. |
|
CVE-2018-16072
MEDIUM 6.5
A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass same origin policy via a cr… |
|
CVE-2018-16071
HIGH 8.8
A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. |
|
CVE-2018-16068
CRITICAL 9.6
Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
|
CVE-2018-16067
MEDIUM 6.5
A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2018-16066
MEDIUM 6.5
A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2018-16065
HIGH 8.8
A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code in… |
|
CVE-2017-15428
HIGH 8.8
Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and… |
|
CVE-2017-15405
HIGH 7.0
Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a persistance established by a malicious code… |
|
CVE-2017-15404
HIGH 7.8
An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Go… |
|
CVE-2017-15403
HIGH 7.3
Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163… |
|
CVE-2017-15402
CRITICAL 9.6
Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any other frame in the same process in Navig… |
|
CVE-2017-15401
HIGH 8.8
A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Chrome prior to 62.0.3202.62 allowed a re… |
|
CVE-2016-9651
HIGH 8.8
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary co… |
|
CVE-2016-10403
HIGH 8.8
Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read v… |
|
CVE-2019-0585
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Exe… |
|
CVE-2019-0568
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2019-0567
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2019-0566
HIGH 8.8
An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulnerability." This aff… |
|
CVE-2019-0565
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
|
CVE-2019-0561
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability.… |
|
CVE-2019-0560
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclos… |
|
CVE-2019-0559
MEDIUM 6.5
An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information Disclosu… |
|
CVE-2019-0539
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
|
CVE-2019-0584
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0583
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0582
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0581
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0580
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0579
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0578
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0577
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0576
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0575
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-0574
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0573
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0572
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0571
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-0570
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2019-0569
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0555
HIGH · vendor
Microsoft XmlDocument Elevation of Privilege Vulnerability |
|
CVE-2019-0554
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0553
HIGH · vendor
Windows Subsystem for Linux Information Disclosure Vulnerability |
|
CVE-2019-0552
HIGH · vendor
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2019-0551
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-0550
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2019-0549
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-0547
CRITICAL · vendor
Windows DHCP Client Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.