Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,930
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-30

All CVEs 19,930 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-8486 HIGH · vendor Windows 2018-10-09 DirectX Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8484 HIGH · vendor Windows 2018-10-09 DirectX Graphics Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8482 HIGH · vendor Windows 2018-10-09 Windows Media Player Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8481 HIGH · vendor Windows 2018-10-09 Windows Media Player Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8472 HIGH · vendor Windows 2018-10-09 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8432 HIGH · vendor Windows 2018-10-09 Microsoft Graphics Components Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8423 HIGH · vendor Windows 2018-10-09 Microsoft JET Database Engine Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8413 HIGH · vendor Windows 2018-10-09 Windows Theme API Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8411 HIGH · vendor Windows 2018-10-09 NTFS Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8333 HIGH · vendor Windows 2018-10-09 Microsoft Filter Manager Elevation Of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8330 HIGH · vendor Windows 2018-10-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8329 HIGH · vendor Windows 2018-10-09 Linux On Windows Elevation Of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-8320 HIGH · vendor Windows 2018-10-09 Windows DNS Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-10-09
CVE-2018-6119 MEDIUM 6.5 2018-09-25 Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted…	MEDIUM 6.5	—		2018-09-25
CVE-2018-6055 HIGH 8.8 2018-09-25 Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside …	HIGH 8.8	—		2018-09-25
CVE-2018-6054 HIGH 8.8 2018-09-25 Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.	HIGH 8.8	—		2018-09-25
CVE-2018-6053 LOW 3.3 2018-09-25 Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing b…	LOW 3.3	—		2018-09-25
CVE-2018-6052 MEDIUM 4.3 2018-09-25 Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer detai…	MEDIUM 4.3	—		2018-09-25
CVE-2018-6051 MEDIUM 4.3 2018-09-25 XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote atta…	MEDIUM 4.3	—		2018-09-25
CVE-2018-6050 MEDIUM 6.5 2018-09-25 Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted…	MEDIUM 6.5	—		2018-09-25
CVE-2018-6049 MEDIUM 6.5 2018-09-25 Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the origin to which permission is grante…	MEDIUM 6.5	—		2018-09-25
CVE-2018-6048 MEDIUM 4.3 2018-09-25 Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak referrer information via a craft…	MEDIUM 4.3	—		2018-09-25
CVE-2018-6047 MEDIUM 4.3 2018-09-25 Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user redirect URL via a crafted …	MEDIUM 4.3	—		2018-09-25
CVE-2018-6046 MEDIUM 6.1 2018-09-25 Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a cra…	MEDIUM 6.1	—		2018-09-25
CVE-2018-6045 MEDIUM 6.5 2018-09-25 Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a cr…	MEDIUM 6.5	—		2018-09-25
CVE-2018-6043 HIGH 8.8 2018-09-25 Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary pr…	HIGH 8.8	—		2018-09-25
CVE-2018-6042 MEDIUM 4.3 2018-09-25 Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted…	MEDIUM 4.3	—		2018-09-25
CVE-2018-6041 MEDIUM 4.3 2018-09-25 Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a craf…	MEDIUM 4.3	—		2018-09-25
CVE-2018-6040 MEDIUM 6.5 2018-09-25 Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially bypass content security policy via a …	MEDIUM 6.5	—		2018-09-25
CVE-2018-6039 MEDIUM 6.1 2018-09-25 Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a cra…	MEDIUM 6.1	—		2018-09-25
CVE-2018-6038 MEDIUM 6.5 2018-09-25 Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.	MEDIUM 6.5	—		2018-09-25
CVE-2018-6037 MEDIUM 6.5 2018-09-25 Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestu…	MEDIUM 6.5	—		2018-09-25
CVE-2018-6036 MEDIUM 6.5 2018-09-25 Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML page.	MEDIUM 6.5	—		2018-09-25
CVE-2018-6035 HIGH 8.8 2018-09-25 Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a cr…	HIGH 8.8	—		2018-09-25
CVE-2018-6034 HIGH 8.1 2018-09-25 Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted H…	HIGH 8.1	—		2018-09-25
CVE-2018-6033 HIGH 8.8 2018-09-25 Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox v…	HIGH 8.8	—		2018-09-25
CVE-2018-6032 MEDIUM 6.5 2018-09-25 Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a cra…	MEDIUM 6.5	—		2018-09-25
CVE-2018-6031 HIGH 8.8 2018-09-25 Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.	HIGH 8.8	—		2018-09-25
CVE-2018-14647 HIGH 7.5 2018-09-25 Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks a…	HIGH 7.5	—		2018-09-25
CVE-2018-1000802 CRITICAL 9.8 2018-09-18 Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') …	CRITICAL 9.8	—		2018-09-18
CVE-2018-8469 HIGH 7.4 Microsoft Edge 2018-09-13 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 7.4	—	Microsoft Edge	2018-09-13
CVE-2018-8467 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8466 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8465 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8464 HIGH 7.5 Microsoft Edge 2018-09-13 An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Executio…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8463 HIGH 7.4 Microsoft Edge 2018-09-13 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 7.4	—	Microsoft Edge	2018-09-13
CVE-2018-8459 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8457 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8456 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8452 MEDIUM 4.3 Microsoft Edge 2018-09-13 An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engin…	MEDIUM 4.3	—	Microsoft Edge	2018-09-13

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM