Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,930
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-30

All CVEs 19,930 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-8339 HIGH · vendor Windows 2018-08-14 Windows Installer Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-08-14
CVE-2018-8253 HIGH · vendor Windows 2018-08-14 Microsoft Cortana Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-08-14
CVE-2018-8204 HIGH · vendor Windows 2018-08-14 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-08-14
CVE-2018-8200 HIGH · vendor Windows 2018-08-14 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-08-14
CVE-2018-0952 HIGH · vendor Windows 2018-08-14 Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-08-14
CVE-2018-8325 MEDIUM 4.3 Microsoft Edge 2018-07-11 An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili…	MEDIUM 4.3	—	Microsoft Edge	2018-07-11
CVE-2018-8324 MEDIUM 4.3 Microsoft Edge 2018-07-11 An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili…	MEDIUM 4.3	—	Microsoft Edge	2018-07-11
CVE-2018-8310 HIGH 7.5 2018-07-11 A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka "Microsoft Office Ta…	HIGH 7.5	—		2018-07-11
CVE-2018-8301 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8297 MEDIUM 4.3 Microsoft Edge 2018-07-11 An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili…	MEDIUM 4.3	—	Microsoft Edge	2018-07-11
CVE-2018-8294 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8291 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8290 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8289 MEDIUM 4.3 Microsoft Edge 2018-07-11 An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili…	MEDIUM 4.3	—	Microsoft Edge	2018-07-11
CVE-2018-8288 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8287 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8286 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8280 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8279 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8278 MEDIUM 6.1 Microsoft Edge 2018-07-11 A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microso…	MEDIUM 6.1	—	Microsoft Edge	2018-07-11
CVE-2018-8276 MEDIUM 6.5 Microsoft Edge 2018-07-11 A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Eng…	MEDIUM 6.5	—	Microsoft Edge	2018-07-11
CVE-2018-8275 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8274 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8262 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8125 HIGH 7.5 Microsoft Edge 2018-07-11 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…	HIGH 7.5	—	Microsoft Edge	2018-07-11
CVE-2018-8313 HIGH · vendor Windows 2018-07-10 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-07-10
CVE-2018-8309 HIGH · vendor Windows 2018-07-10 Windows Denial of Service Vulnerability	HIGH · vendor	—	Windows	2018-07-10
CVE-2018-8308 HIGH · vendor Windows 2018-07-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-07-10
CVE-2018-8307 HIGH · vendor Windows 2018-07-10 WordPad Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-07-10
CVE-2018-8304 HIGH · vendor Windows 2018-07-10 Windows DNSAPI Denial of Service Vulnerability	HIGH · vendor	—	Windows	2018-07-10
CVE-2018-8282 HIGH · vendor Windows 2018-07-10 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-07-10
CVE-2018-8222 HIGH · vendor Windows 2018-07-10 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-07-10
CVE-2018-8206 HIGH · vendor Windows 2018-07-10 Windows Firewall Denial of Service Vulnerability	HIGH · vendor	—	Windows	2018-07-10
CVE-2018-0593 HIGH 7.8 Microsoft OneDrive 2018-06-26 Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified direc…	HIGH 7.8	—	Microsoft OneDrive	2018-06-26
CVE-2018-0592 HIGH 7.8 Microsoft OneDrive 2018-06-26 Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	HIGH 7.8	—	Microsoft OneDrive	2018-06-26
CVE-2018-1061 MEDIUM 6.5 2018-06-19 python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker …	MEDIUM 6.5	—		2018-06-19
CVE-2018-1060 HIGH 7.5 2018-06-18 python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use…	HIGH 7.5	—		2018-06-18
CVE-2018-8246 MEDIUM 5.5 2018-06-14 An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosur…	MEDIUM 5.5	—		2018-06-14
CVE-2018-8244 MEDIUM 6.5 2018-06-14 An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly, aka "Microsoft Outlook Elevation of Privil…	MEDIUM 6.5	—		2018-06-14
CVE-2018-8236 HIGH 7.5 Microsoft Edge 2018-06-14 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…	HIGH 7.5	—	Microsoft Edge	2018-06-14
CVE-2018-8235 MEDIUM 4.3 Microsoft Edge 2018-06-14 A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypas…	MEDIUM 4.3	—	Microsoft Edge	2018-06-14
CVE-2018-8234 MEDIUM 4.3 Microsoft Edge 2018-06-14 An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili…	MEDIUM 4.3	—	Microsoft Edge	2018-06-14
CVE-2018-8229 HIGH 7.5 Microsoft Edge 2018-06-14 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-06-14
CVE-2018-8227 HIGH 7.5 Microsoft Edge 2018-06-14 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-06-14
CVE-2018-8111 HIGH 7.5 Microsoft Edge 2018-06-14 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…	HIGH 7.5	—	Microsoft Edge	2018-06-14
CVE-2018-8110 HIGH 7.5 Microsoft Edge 2018-06-14 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…	HIGH 7.5	—	Microsoft Edge	2018-06-14
CVE-2018-0871 MEDIUM 4.3 Microsoft Edge 2018-06-14 An information disclosure vulnerability exists when Edge improperly marks files, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Micros…	MEDIUM 4.3	—	Microsoft Edge	2018-06-14
CVE-2018-8251 CRITICAL · vendor Windows 2018-06-12 Media Foundation Memory Corruption Vulnerability	CRITICAL · vendor	—	Windows	2018-06-12
CVE-2018-8239 HIGH · vendor Windows 2018-06-12 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-06-12
CVE-2018-8233 HIGH · vendor Windows 2018-06-12 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-06-12

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM