Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,930
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-30

All CVEs 19,930 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-1025 MEDIUM 4.3 Microsoft Edge 2018-05-09 An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka "Microsoft Browser Information Disclos…	MEDIUM 4.3	—	Microsoft Edge	2018-05-09
CVE-2018-1022 HIGH 7.5 Microsoft Edge 2018-05-09 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-05-09
CVE-2018-1021 MEDIUM 4.3 Microsoft Edge 2018-05-09 An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili…	MEDIUM 4.3	—	Microsoft Edge	2018-05-09
CVE-2018-0954 HIGH 7.5 Microsoft Edge 2018-05-09 A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corr…	HIGH 7.5	—	Microsoft Edge	2018-05-09
CVE-2018-0953 HIGH 7.5 Microsoft Edge 2018-05-09 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor…	HIGH 7.5	—	Microsoft Edge	2018-05-09
CVE-2018-0951 HIGH 7.5 Microsoft Edge 2018-05-09 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor…	HIGH 7.5	—	Microsoft Edge	2018-05-09
CVE-2018-0946 HIGH 7.5 Microsoft Edge 2018-05-09 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor…	HIGH 7.5	—	Microsoft Edge	2018-05-09
CVE-2018-0945 HIGH 7.5 Microsoft Edge 2018-05-09 A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Cor…	HIGH 7.5	—	Microsoft Edge	2018-05-09
CVE-2018-0943 HIGH 7.5 Microsoft Edge 2018-05-09 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-05-09
CVE-2018-8897 HIGH · vendor Windows 2018-05-08 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8170 HIGH · vendor Windows 2018-05-08 Windows Image Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8167 HIGH · vendor Windows 2018-05-08 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8166 HIGH · vendor Windows 2018-05-08 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8165 HIGH · vendor Windows 2018-05-08 DirectX Graphics Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8164 HIGH · vendor Windows 2018-05-08 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8142 HIGH · vendor Windows 2018-05-08 Windows Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8141 HIGH · vendor Windows 2018-05-08 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8136 LOW · vendor Windows 2018-05-08 Windows Remote Code Execution Vulnerability	LOW · vendor	—	Windows	2018-05-08
CVE-2018-8134 HIGH · vendor Windows 2018-05-08 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8132 HIGH · vendor Windows 2018-05-08 Windows Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8129 HIGH · vendor Windows 2018-05-08 Windows Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8127 HIGH · vendor Windows 2018-05-08 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-8124 HIGH · vendor Windows 2018-05-08 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-0961 CRITICAL · vendor Windows 2018-05-08 Hyper-V vSMB Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-05-08
CVE-2018-0959 CRITICAL · vendor Windows 2018-05-08 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-05-08
CVE-2018-0958 HIGH · vendor Windows 2018-05-08 Windows Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-0854 HIGH · vendor Windows 2018-05-08 Windows Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-05-08
CVE-2018-0824 HIGH · vendor KEV Windows 2018-05-08 Microsoft COM for Windows Remote Code Execution Vulnerability	HIGH · vendor	KEV	Windows	2018-05-08
CVE-2018-10229 MEDIUM 4.8 2018-05-04 A hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural attacks through the use of the JavaScript WebGL API.	MEDIUM 4.8	—		2018-05-04
CVE-2018-10115 HIGH 7.8 7-Zip 2018-05-02 Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a…	HIGH 7.8	—	7-Zip	2018-05-02
CVE-2018-10172 HIGH 8.8 7-Zip 2018-04-16 7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivilege privileg…	HIGH 8.8	—	7-Zip	2018-04-16
CVE-2018-1029 HIGH 7.8 2018-04-12 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem…	HIGH 7.8	—		2018-04-12
CVE-2018-1027 HIGH 7.8 2018-04-12 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem…	HIGH 7.8	—		2018-04-12
CVE-2018-1023 HIGH 7.5 Microsoft Edge 2018-04-12 A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerabilit…	HIGH 7.5	—	Microsoft Edge	2018-04-12
CVE-2018-1019 HIGH 7.5 Microsoft Edge 2018-04-12 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-04-12
CVE-2018-1011 HIGH 7.8 2018-04-12 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem…	HIGH 7.8	—		2018-04-12
CVE-2018-0998 MEDIUM 4.3 Microsoft Edge 2018-04-12 An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge Information Disclosure …	MEDIUM 4.3	—	Microsoft Edge	2018-04-12
CVE-2018-0995 HIGH 7.5 Microsoft Edge 2018-04-12 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-04-12
CVE-2018-0994 HIGH 7.5 Microsoft Edge 2018-04-12 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-04-12
CVE-2018-0993 HIGH 7.5 Microsoft Edge 2018-04-12 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-04-12
CVE-2018-0990 HIGH 7.5 Microsoft Edge 2018-04-12 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-04-12
CVE-2018-0980 HIGH 7.5 Microsoft Edge 2018-04-12 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-04-12
CVE-2018-0979 HIGH 7.5 Microsoft Edge 2018-04-12 A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng…	HIGH 7.5	—	Microsoft Edge	2018-04-12
CVE-2018-0950 MEDIUM 6.5 2018-04-12 An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or pre…	MEDIUM 6.5	—		2018-04-12
CVE-2018-0920 HIGH 7.8 2018-04-12 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem…	HIGH 7.8	—		2018-04-12
CVE-2018-0892 MEDIUM 4.3 Microsoft Edge 2018-04-12 An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili…	MEDIUM 4.3	—	Microsoft Edge	2018-04-12
CVE-2018-8116 MEDIUM · vendor Windows 2018-04-10 Microsoft Graphics Component Denial of Service Vulnerability	MEDIUM · vendor	—	Windows	2018-04-10
CVE-2018-1035 HIGH · vendor Windows 2018-04-10 Windows Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-04-10
CVE-2018-1016 CRITICAL · vendor Windows 2018-04-10 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-04-10
CVE-2018-1015 CRITICAL · vendor Windows 2018-04-10 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-04-10

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM