Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,930
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-30

All CVEs 19,930 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2018-0795 HIGH 8.8 2018-01-10 Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memor…	HIGH 8.8	—		2018-01-10
CVE-2018-0794 HIGH 8.8 2018-01-10 Microsoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability d…	HIGH 8.8	—		2018-01-10
CVE-2018-0793 HIGH 7.8 2018-01-10 Microsoft Outlook 2007, Microsoft Outlook 2010 and Microsoft Outlook 2013 allow a remote code execution vulnerability due to the way email messages are parsed,…	HIGH 7.8	—		2018-01-10
CVE-2018-0792 HIGH 8.8 2018-01-10 Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Rem…	HIGH 8.8	—		2018-01-10
CVE-2018-0791 HIGH 7.8 2018-01-10 Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, and Microsoft Outlook 2016 allow a remote code execution vulnerability due to the way e…	HIGH 7.8	—		2018-01-10
CVE-2015-1290 HIGH 8.8 2018-01-09 The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service…	HIGH 8.8	—		2018-01-09
CVE-2018-0754 HIGH · vendor Windows 2018-01-09 OpenType Font Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0753 HIGH · vendor Windows 2018-01-09 Windows IPSec Denial of Service Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0752 HIGH · vendor Windows 2018-01-09 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0751 HIGH · vendor Windows 2018-01-09 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0749 HIGH · vendor Windows 2018-01-09 SMB Server Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0748 HIGH · vendor Windows 2018-01-09 Windows Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0747 HIGH · vendor Windows 2018-01-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0746 HIGH · vendor Windows 2018-01-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0745 HIGH · vendor Windows 2018-01-09 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0744 HIGH · vendor Windows 2018-01-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0743 HIGH · vendor Windows 2018-01-09 Windows Subsystem for Linux Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2018-01-09
CVE-2018-0803 MEDIUM 4.2 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from one domain and injec…	MEDIUM 4.2	—	Microsoft Edge	2018-01-04
CVE-2018-0800 MEDIUM 5.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine h…	MEDIUM 5.3	—	Microsoft Edge	2018-01-04
CVE-2018-0781 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0780 MEDIUM 5.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…	MEDIUM 5.3	—	Microsoft Edge	2018-01-04
CVE-2018-0778 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0777 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0776 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0775 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0774 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0773 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0772 HIGH 7.5 Microsoft Edge 2018-01-04 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0770 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0769 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0768 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles obje…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0767 MEDIUM 5.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user'…	MEDIUM 5.3	—	Microsoft Edge	2018-01-04
CVE-2018-0766 MEDIUM 4.3 Microsoft Edge 2018-01-04 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the…	MEDIUM 4.3	—	Microsoft Edge	2018-01-04
CVE-2018-0762 HIGH 7.5 Microsoft Edge 2018-01-04 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2018-0758 HIGH 7.5 Microsoft Edge 2018-01-04 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current u…	HIGH 7.5	—	Microsoft Edge	2018-01-04
CVE-2017-1000460 MEDIUM 6.5 2018-01-03 In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of init_get_bits is ignored and get_ue_gol…	MEDIUM 6.5	—		2018-01-03
CVE-2017-17522 HIGH · vendor 2017-12-14 Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might all…	HIGH · vendor	—		2017-12-14
CVE-2017-11919 MEDIUM 5.3 Microsoft Edge 2017-12-12 ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Windows 1…	MEDIUM 5.3	—	Microsoft Edge	2017-12-12
CVE-2017-11918 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the curren…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11914 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11912 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and I…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11911 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11910 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11909 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11908 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11905 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11895 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Internet …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11894 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and a…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11893 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the …	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11889 HIGH 7.5 Microsoft Edge 2017-12-12 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context o…	HIGH 7.5	—	Microsoft Edge	2017-12-12

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM