Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,930
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-30

All CVEs 19,930 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-8430 HIGH 7.8 2018-09-13 A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execution Vulnerability.…	HIGH 7.8	—		2018-09-13
CVE-2018-8429 MEDIUM 5.5 2018-09-13 An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosur…	MEDIUM 5.5	—		2018-09-13
CVE-2018-8425 MEDIUM 4.3 Microsoft Edge 2018-09-13 A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microso…	MEDIUM 4.3	—	Microsoft Edge	2018-09-13
CVE-2018-8367 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8366 LOW 3.1 Microsoft Edge 2018-09-13 An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information …	LOW 3.1	—	Microsoft Edge	2018-09-13
CVE-2018-8354 HIGH 7.5 Microsoft Edge 2018-09-13 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor…	HIGH 7.5	—	Microsoft Edge	2018-09-13
CVE-2018-8331 HIGH 7.8 2018-09-13 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem…	HIGH 7.8	—		2018-09-13
CVE-2018-8315 MEDIUM 4.2 Microsoft Edge 2018-09-13 An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Di…	MEDIUM 4.2	—	Microsoft Edge	2018-09-13
CVE-2018-8475 CRITICAL · vendor Windows 2018-09-11 Windows Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-09-11
CVE-2018-8468 HIGH · vendor Windows 2018-09-11 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8462 HIGH · vendor Windows 2018-09-11 DirectX Graphics Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8455 HIGH · vendor Windows 2018-09-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8449 HIGH · vendor Windows 2018-09-11 Device Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8446 HIGH · vendor Windows 2018-09-11 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8445 HIGH · vendor Windows 2018-09-11 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8443 HIGH · vendor Windows 2018-09-11 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8442 HIGH · vendor Windows 2018-09-11 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8441 HIGH · vendor Windows 2018-09-11 Windows Subsystem for Linux Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8440 HIGH · vendor KEV Windows 2018-09-11 Windows ALPC Elevation of Privilege Vulnerability	HIGH · vendor	KEV	Windows	2018-09-11
CVE-2018-8439 CRITICAL · vendor Windows 2018-09-11 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-09-11
CVE-2018-8438 HIGH · vendor Windows 2018-09-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8437 HIGH · vendor Windows 2018-09-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8436 HIGH · vendor Windows 2018-09-11 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8435 HIGH · vendor Windows 2018-09-11 Windows Hyper-V Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8434 HIGH · vendor Windows 2018-09-11 Windows Hyper-V Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8433 HIGH · vendor Windows 2018-09-11 Microsoft Graphics Component Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8424 HIGH · vendor Windows 2018-09-11 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8420 CRITICAL · vendor Windows 2018-09-11 MS XML Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-09-11
CVE-2018-8419 HIGH · vendor Windows 2018-09-11 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8410 HIGH · vendor Windows 2018-09-11 Windows Registry Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8393 HIGH · vendor Windows 2018-09-11 Microsoft JET Database Engine Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8392 HIGH · vendor Windows 2018-09-11 Microsoft JET Database Engine Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8337 HIGH · vendor Windows 2018-09-11 Windows Subsystem for Linux Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8335 HIGH · vendor Windows 2018-09-11 Windows SMB Denial of Service Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-8332 CRITICAL · vendor Windows 2018-09-11 Win32k Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-09-11
CVE-2018-8271 HIGH · vendor Windows 2018-09-11 Windows Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-09-11
CVE-2018-0965 CRITICAL · vendor Windows 2018-09-11 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-09-11
CVE-2017-15429 MEDIUM 6.1 2018-08-28 Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTM…	MEDIUM 6.1	—		2018-08-28
CVE-2017-15406 HIGH 8.8 2018-08-28 A stack buffer overflow in V8 in Google Chrome prior to 62.0.3202.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.	HIGH 8.8	—		2018-08-28
CVE-2017-15399 HIGH 8.8 2018-08-28 A use after free in V8 in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2018-08-28
CVE-2017-15398 CRITICAL 9.8 2018-08-28 A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious se…	CRITICAL 9.8	—		2018-08-28
CVE-2017-15396 MEDIUM 6.5 2018-08-28 A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.32…	MEDIUM 6.5	—		2018-08-28
CVE-2017-15430 MEDIUM 4.3 2018-08-28 Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) v…	MEDIUM 4.3	—		2018-08-28
CVE-2017-15427 MEDIUM 6.1 2018-08-28 Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping…	MEDIUM 6.1	—		2018-08-28
CVE-2017-15426 MEDIUM 6.5 2018-08-28 Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a …	MEDIUM 6.5	—		2018-08-28
CVE-2017-15425 MEDIUM 6.5 2018-08-28 Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a …	MEDIUM 6.5	—		2018-08-28
CVE-2017-15424 MEDIUM 6.5 2018-08-28 Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a …	MEDIUM 6.5	—		2018-08-28
CVE-2017-15423 MEDIUM 5.3 2018-08-28 Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password…	MEDIUM 5.3	—		2018-08-28
CVE-2017-15422 MEDIUM 6.5 2018-08-28 Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63…	MEDIUM 6.5	—		2018-08-28
CVE-2017-15420 MEDIUM 6.5 2018-08-28 Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of t…	MEDIUM 6.5	—		2018-08-28

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM