Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,930
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-30

All CVEs 19,930 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-0829 HIGH · vendor Windows 2018-02-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0828 HIGH · vendor Windows 2018-02-13 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0827 HIGH · vendor Windows 2018-02-13 Windows Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0826 HIGH · vendor Windows 2018-02-13 Windows Storage Services Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0825 CRITICAL · vendor Windows 2018-02-13 StructuredQuery Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-02-13
CVE-2018-0823 HIGH · vendor Windows 2018-02-13 Named Pipe File System Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0822 HIGH · vendor Windows 2018-02-13 Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0821 HIGH · vendor Windows 2018-02-13 Windows AppContainer Elevation Of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0820 HIGH · vendor Windows 2018-02-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0809 HIGH · vendor Windows 2018-02-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0757 HIGH · vendor Windows 2018-02-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0756 HIGH · vendor Windows 2018-02-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-0742 HIGH · vendor Windows 2018-02-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-02-13
CVE-2018-1000030 LOW 3.6 2018-02-08 Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears t…	LOW 3.6	—		2018-02-08
CVE-2017-5133 HIGH 8.8 2018-02-07 Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and…	HIGH 8.8	—		2018-02-07
CVE-2017-5132 HIGH 8.8 2018-02-07 Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	HIGH 8.8	—		2018-02-07
CVE-2017-5131 HIGH 8.8 2018-02-07 An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, ak…	HIGH 8.8	—		2018-02-07
CVE-2017-5130 HIGH 8.8 2018-02-07 An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to pot…	HIGH 8.8	—		2018-02-07
CVE-2017-5129 HIGH 8.8 2018-02-07 A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HT…	HIGH 8.8	—		2018-02-07
CVE-2017-5128 HIGH 8.8 2018-02-07 Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, …	HIGH 8.8	—		2018-02-07
CVE-2017-5127 HIGH 8.8 2018-02-07 Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.	HIGH 8.8	—		2018-02-07
CVE-2017-5126 HIGH 8.8 2018-02-07 A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.	HIGH 8.8	—		2018-02-07
CVE-2017-5125 HIGH 8.8 2018-02-07 Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8	—		2018-02-07
CVE-2017-5124 MEDIUM 6.1 2018-02-07 Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a …	MEDIUM 6.1	—		2018-02-07
CVE-2017-15395 MEDIUM 6.5 2018-02-07 A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka …	MEDIUM 6.5	—		2018-02-07
CVE-2017-15394 MEDIUM 6.5 2018-02-07 Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs…	MEDIUM 6.5	—		2018-02-07
CVE-2017-15393 HIGH 8.8 2018-02-07 Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugg…	HIGH 8.8	—		2018-02-07
CVE-2017-15392 MEDIUM 4.3 2018-02-07 Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to potentially exploit heap…	MEDIUM 4.3	—		2018-02-07
CVE-2017-15391 MEDIUM 6.5 2018-02-07 Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation …	MEDIUM 6.5	—		2018-02-07
CVE-2017-15390 MEDIUM 6.5 2018-02-07 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a …	MEDIUM 6.5	—		2018-02-07
CVE-2017-15389 MEDIUM 6.5 2018-02-07 An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) vi…	MEDIUM 6.5	—		2018-02-07
CVE-2017-15388 HIGH 8.8 2018-02-07 Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a craf…	HIGH 8.8	—		2018-02-07
CVE-2017-15387 HIGH 8.8 2018-02-07 Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows w…	HIGH 8.8	—		2018-02-07
CVE-2017-15386 MEDIUM 6.5 2018-02-07 Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted…	MEDIUM 6.5	—		2018-02-07
CVE-2018-5996 HIGH · vendor 7-Zip 2018-01-31 Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within t…	HIGH · vendor	—	7-Zip	2018-01-31
CVE-2017-17969 HIGH · vendor 7-Zip 2018-01-30 Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of se…	HIGH · vendor	—	7-Zip	2018-01-30
CVE-2018-0862 HIGH 8.8 2018-01-22 Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e…	HIGH 8.8	—		2018-01-22
CVE-2018-0849 HIGH 8.8 2018-01-22 Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e…	HIGH 8.8	—		2018-01-22
CVE-2018-0848 HIGH 8.8 2018-01-22 Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e…	HIGH 8.8	—		2018-01-22
CVE-2018-0845 HIGH 7.8 2018-01-22 Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e…	HIGH 7.8	—		2018-01-22
CVE-2018-0812 HIGH 7.8 2018-01-10 Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e…	HIGH 7.8	—		2018-01-10
CVE-2018-0807 HIGH 8.8 2018-01-10 Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e…	HIGH 8.8	—		2018-01-10
CVE-2018-0806 HIGH 8.8 2018-01-10 Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e…	HIGH 8.8	—		2018-01-10
CVE-2018-0805 HIGH 8.8 2018-01-10 Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e…	HIGH 8.8	—		2018-01-10
CVE-2018-0804 HIGH 8.8 2018-01-10 Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code e…	HIGH 8.8	—		2018-01-10
CVE-2018-0802 HIGH 7.8 KEV 2018-01-10 Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability d…	HIGH 7.8	KEV		2018-01-10
CVE-2018-0801 HIGH 8.8 2018-01-10 Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability …	HIGH 8.8	—		2018-01-10
CVE-2018-0798 HIGH 8.8 KEV 2018-01-10 Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability …	HIGH 8.8	KEV		2018-01-10
CVE-2018-0797 HIGH 7.8 2018-01-10 Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka …	HIGH 7.8	—		2018-01-10
CVE-2018-0796 HIGH 8.8 2018-01-10 Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability …	HIGH 8.8	—		2018-01-10

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM