Vulnerabilities

Tracked app vulnerabilities

1,726 CVEs affect a tracked app or OS (Critical, Windows). 37 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 1,726
Actively exploited: 37
Publication window: 2007-08-28 → 2026-11-11

All CVEs 1,726 CISA KEV 37 Public exploit 44 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

1,726 entries Critical Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-1012 CRITICAL · vendor Windows 2018-04-10 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-04-10
CVE-2018-1010 CRITICAL · vendor Windows 2018-04-10 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-04-10
CVE-2018-1004 CRITICAL · vendor Windows 2018-04-10 Windows VBScript Engine Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-04-10
CVE-2018-0825 CRITICAL · vendor Windows 2018-02-13 StructuredQuery Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2018-02-13
CVE-2017-1000158 CRITICAL 9.8 2017-11-17 CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer …	CRITICAL 9.8	—		2017-11-17
CVE-2017-8727 CRITICAL · vendor Windows 2017-10-10 Internet Explorer Memory Corruption Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-11779 CRITICAL · vendor Windows 2017-10-10 Windows DNSAPI Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-11771 CRITICAL · vendor Windows 2017-10-10 Windows Search Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-11763 CRITICAL · vendor Windows 2017-10-10 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-11762 CRITICAL · vendor Windows 2017-10-10 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-9417 CRITICAL · vendor Android Windows 2017-09-12 Broadcom BCM43xx Remote Code Execution Vulnerability	CRITICAL · vendor	—	Android Windows	2017-09-12
CVE-2017-8686 CRITICAL · vendor Windows 2017-09-12 Windows DHCP Server Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-09-12
CVE-2017-8682 CRITICAL · vendor Windows 2017-09-12 Win32k Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-09-12
CVE-2017-8676 CRITICAL · vendor Windows 2017-09-12 Windows GDI+ Information Disclosure Vulnerability	CRITICAL · vendor	—	Windows	2017-09-12
CVE-2017-0161 CRITICAL · vendor Windows 2017-09-12 NetBIOS Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-09-12
CVE-2017-8622 CRITICAL · vendor Windows 2017-08-08 Windows Subsystem for Linux Elevation of Privilege Vulnerability	CRITICAL · vendor	—	Windows	2017-08-08
CVE-2017-8620 CRITICAL · vendor Windows 2017-08-08 Windows Search Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-08-08
CVE-2017-8591 CRITICAL · vendor Windows 2017-08-08 Windows IME Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-08-08
CVE-2017-0250 CRITICAL · vendor Windows 2017-08-08 Microsoft JET Database Engine Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-08-08
CVE-2017-0028 CRITICAL 9.8 Microsoft Edge 2017-07-17 A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could corrupt memory in a…	CRITICAL 9.8	—	Microsoft Edge	2017-07-17
CVE-2017-8589 CRITICAL · vendor Windows 2017-07-11 Windows Search Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-07-11
CVE-2017-8584 CRITICAL · vendor Windows 2017-07-11 Broadcom BCM43xx Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-07-11
CVE-2017-8463 CRITICAL · vendor Windows 2017-07-11 Windows Explorer Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-07-11
CVE-2017-8543 CRITICAL · vendor KEV Windows 2017-06-13 Windows Search Remote Code Execution Vulnerability	CRITICAL · vendor	KEV	Windows	2017-06-13
CVE-2017-8527 CRITICAL · vendor Windows 2017-06-13 Win32k Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-06-13
CVE-2017-8464 CRITICAL · vendor KEV Windows 2017-06-13 LNK Remote Code Execution Vulnerability	CRITICAL · vendor	KEV	Windows	2017-06-13
CVE-2017-0294 CRITICAL · vendor Windows 2017-06-13 Windows Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-06-13
CVE-2017-0291 CRITICAL · vendor Windows 2017-06-13 Windows PDF Remote Code Execution	CRITICAL · vendor	—	Windows	2017-06-13
CVE-2017-0283 CRITICAL · vendor Windows 2017-06-13 Windows Uniscribe Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-06-13
CVE-2016-5178 CRITICAL 9.8 2017-05-23 Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact vi…	CRITICAL 9.8	—		2017-05-23
CVE-2017-0252 CRITICAL 9.8 Microsoft Edge 2017-05-15 A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engi…	CRITICAL 9.8	—	Microsoft Edge	2017-05-15
CVE-2017-0223 CRITICAL 9.8 Microsoft Edge 2017-05-15 A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engi…	CRITICAL 9.8	—	Microsoft Edge	2017-05-15
CVE-2017-0279 CRITICAL · vendor Windows 2017-05-09 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-05-09
CVE-2017-0278 CRITICAL · vendor Windows 2017-05-09 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-05-09
CVE-2017-0277 CRITICAL · vendor Windows 2017-05-09 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-05-09
CVE-2017-0272 CRITICAL · vendor Windows 2017-05-09 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-05-09
CVE-2014-9654 CRITICAL 9.8 2017-04-24 The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calcul…	CRITICAL 9.8	—		2017-04-24
CVE-2013-6647 CRITICAL 9.8 2017-04-11 A use-after-free in AnimationController::endAnimationUpdate in Google Chrome.	CRITICAL 9.8	—		2017-04-11
CVE-2017-0181 CRITICAL · vendor Windows 2017-04-11 Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-04-11
CVE-2017-0180 CRITICAL · vendor Windows 2017-04-11 Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-04-11
CVE-2017-0163 CRITICAL · vendor Windows 2017-04-11 Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-04-11
CVE-2017-0162 CRITICAL · vendor Windows 2017-04-11 Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-04-11
CVE-2017-0158 CRITICAL · vendor Windows 2017-04-11 Scripting Engine Memory Corruption Vulnerability	CRITICAL · vendor	—	Windows	2017-04-11
CVE-2017-0148 CRITICAL · vendor KEV Windows 2017-03-14 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	KEV	Windows	2017-03-14
CVE-2017-0146 CRITICAL · vendor KEV Windows 2017-03-14 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	KEV	Windows	2017-03-14
CVE-2017-0143 CRITICAL · vendor KEV Windows 2017-03-14 Windows SMB Remote Code Execution Vulnerability	CRITICAL · vendor	KEV	Windows	2017-03-14
CVE-2017-0109 CRITICAL · vendor Windows 2017-03-14 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-03-14
CVE-2017-0104 CRITICAL · vendor Windows 2017-03-14 iSNS Server Memory Corruption Vulnerability	CRITICAL · vendor	—	Windows	2017-03-14
CVE-2017-0084 CRITICAL · vendor Windows 2017-03-14 Windows Uniscribe Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-03-14
CVE-2017-0075 CRITICAL · vendor Windows 2017-03-14 Windows Hyper-V Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-03-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM