Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,930
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-30

All CVEs 19,930 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-0900 HIGH · vendor Windows 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0899 HIGH · vendor Windows 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0898 HIGH · vendor Windows 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0897 HIGH · vendor Windows 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0896 HIGH · vendor Windows 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0895 HIGH · vendor Windows 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0894 HIGH · vendor Windows 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0888 HIGH · vendor Windows 2018-03-13 Windows Hyper-V Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0886 HIGH · vendor Windows 2018-03-13 CredSSP Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0885 HIGH · vendor Windows 2018-03-13 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0884 HIGH · vendor Windows 2018-03-13 Windows Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0883 HIGH · vendor Windows 2018-03-13 Windows Shell Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0882 HIGH · vendor Windows 2018-03-13 Windows Desktop Bridge Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0881 HIGH · vendor Windows 2018-03-13 Microsoft Video Control Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0880 HIGH · vendor Windows 2018-03-13 Windows Desktop Bridge Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0878 HIGH · vendor Windows 2018-03-13 Windows Remote Assistance Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0877 HIGH · vendor Windows 2018-03-13 Windows Desktop Bridge VFS Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0868 HIGH · vendor Windows 2018-03-13 Windows Installer Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0817 HIGH · vendor Windows 2018-03-13 Windows GDI Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0816 HIGH · vendor Windows 2018-03-13 Windows GDI Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0814 HIGH · vendor Windows 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0813 HIGH · vendor Windows 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-0811 HIGH · vendor Windows 2018-03-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-03-13
CVE-2018-1000117 MEDIUM 6.7 2018-03-07 Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that ca…	MEDIUM 6.7	—		2018-03-07
CVE-2017-18207 MEDIUM · vendor 2018-03-01 The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial…	MEDIUM · vendor	—		2018-03-01
CVE-2018-0861 HIGH 7.5 Microsoft Edge 2018-02-15 Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in mem…	HIGH 7.5	—	Microsoft Edge	2018-02-15
CVE-2018-0860 HIGH 7.5 Microsoft Edge 2018-02-15 Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script…	HIGH 7.5	—	Microsoft Edge	2018-02-15
CVE-2018-0859 HIGH 7.5 Microsoft Edge 2018-02-15 Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script…	HIGH 7.5	—	Microsoft Edge	2018-02-15
CVE-2018-0857 HIGH 7.5 Microsoft Edge 2018-02-15 Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script…	HIGH 7.5	—	Microsoft Edge	2018-02-15
CVE-2018-0856 HIGH 7.5 Microsoft Edge 2018-02-15 Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, ak…	HIGH 7.5	—	Microsoft Edge	2018-02-15
CVE-2018-0852 HIGH 8.8 2018-02-15 Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (…	HIGH 8.8	—		2018-02-15
CVE-2018-0851 HIGH 8.8 2018-02-15 Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft …	HIGH 8.8	—		2018-02-15
CVE-2018-0850 MEDIUM 6.5 2018-02-15 Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of pr…	MEDIUM 6.5	—		2018-02-15
CVE-2018-0840 HIGH 7.5 Microsoft Edge 2018-02-15 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and…	HIGH 7.5	—	Microsoft Edge	2018-02-15
CVE-2018-0839 MEDIUM 4.3 Microsoft Edge 2018-02-15 Microsoft Edge in Microsoft Windows 10 1703 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosur…	MEDIUM 4.3	—	Microsoft Edge	2018-02-15
CVE-2018-0838 HIGH 7.5 Microsoft Edge 2018-02-15 Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script…	HIGH 7.5	—	Microsoft Edge	2018-02-15
CVE-2018-0837 HIGH 7.5 Microsoft Edge 2018-02-15 Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script…	HIGH 7.5	—	Microsoft Edge	2018-02-15
CVE-2018-0836 HIGH 7.5 Microsoft Edge 2018-02-15 Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, ak…	HIGH 7.5	—	Microsoft Edge	2018-02-15
CVE-2018-0835 HIGH 7.5 Microsoft Edge 2018-02-15 Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script…	HIGH 7.5	—	Microsoft Edge	2018-02-15
CVE-2018-0834 HIGH 7.5 Microsoft Edge 2018-02-15 Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the script…	HIGH 7.5	—	Microsoft Edge	2018-02-15
CVE-2018-0771 MEDIUM 4.3 Microsoft Edge 2018-02-15 Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows a security feature bypass, due to how Edge handles different-origin requests,…	MEDIUM 4.3	—	Microsoft Edge	2018-02-15
CVE-2018-0763 LOW 3.1 Microsoft Edge 2018-02-15 Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information …	LOW 3.1	—	Microsoft Edge	2018-02-15
CVE-2018-0847 HIGH · vendor Windows 2018-02-13 Windows Scripting Engine Memory Corruption Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0846 HIGH · vendor Windows 2018-02-13 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0844 HIGH · vendor Windows 2018-02-13 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0843 HIGH · vendor Windows 2018-02-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0842 HIGH · vendor Windows 2018-02-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0832 HIGH · vendor Windows 2018-02-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0831 HIGH · vendor Windows 2018-02-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0830 HIGH · vendor Windows 2018-02-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-02-13

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM