Vulnerabilities
Tracked app vulnerabilities
19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,930
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2018-1013
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2018-1012
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2018-1010
CRITICAL · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2018-1009
HIGH · vendor
Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability |
|
CVE-2018-1008
HIGH · vendor
Graphics Component Font Parsing Elevation of Privilege Vulnerability |
|
CVE-2018-1004
CRITICAL · vendor
Windows VBScript Engine Remote Code Execution Vulnerability |
|
CVE-2018-1003
HIGH · vendor
Microsoft JET Database Engine Remote Code Execution Vulnerability |
|
CVE-2018-0976
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability |
|
CVE-2018-0975
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0974
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0973
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0972
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0971
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0970
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0969
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0968
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0967
HIGH · vendor
Windows SNMP Service Denial of Service Vulnerability |
|
CVE-2018-0966
HIGH · vendor
Device Guard Security Feature Bypass Vulnerability |
|
CVE-2018-0964
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2018-0963
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2018-0960
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0957
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2018-0956
HIGH · vendor
HTTP/2 Server Denial of Service Vulnerability |
|
CVE-2018-0890
HIGH · vendor
Active Directory Security Feature Bypass Vulnerability |
|
CVE-2018-0887
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0939
MEDIUM 4.3
ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripti… |
|
CVE-2018-0937
HIGH 7.5
ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Sc… |
|
CVE-2018-0936
HIGH 7.5
ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting E… |
|
CVE-2018-0934
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0933
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0932
MEDIUM 4.3
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and In… |
|
CVE-2018-0931
HIGH 7.5
ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine … |
|
CVE-2018-0930
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka … |
|
CVE-2018-0927
MEDIUM 4.3
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and In… |
|
CVE-2018-0922
HIGH 7.8
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Micro… |
|
CVE-2018-0919
LOW 3.3
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft … |
|
CVE-2018-0907
HIGH 7.8
Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and Microsoft Office 201… |
|
CVE-2018-0893
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles object… |
|
CVE-2018-0891
MEDIUM 4.3
ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and I… |
|
CVE-2018-0879
HIGH 7.5
Microsoft Edge in Windows 10 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerab… |
|
CVE-2018-0876
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles object… |
|
CVE-2018-0874
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra… |
|
CVE-2018-0873
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scrip… |
|
CVE-2018-0872
HIGH 7.5
ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra… |
|
CVE-2018-0983
HIGH · vendor
Windows Storage Services Elevation of Privilege Vulnerability |
|
CVE-2018-0977
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2018-0926
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0904
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2018-0902
HIGH · vendor
CNG Security Feature Bypass Vulnerability |
|
CVE-2018-0901
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.