Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,930
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-30

All CVEs 19,930 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2017-11888 HIGH 7.5 Microsoft Edge 2017-12-12 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the…	HIGH 7.5	—	Microsoft Edge	2017-12-12
CVE-2017-11927 HIGH · vendor Windows 2017-12-12 Microsoft Windows Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-12-12
CVE-2017-11899 HIGH · vendor Windows 2017-12-12 Device Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-12-12
CVE-2017-11885 HIGH · vendor Windows 2017-12-12 Windows RRAS Service Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2017-12-12
CVE-2017-1000158 CRITICAL 9.8 2017-11-17 CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer …	CRITICAL 9.8	—		2017-11-17
CVE-2017-11884 HIGH 7.8 2017-11-15 Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in me…	HIGH 7.8	—		2017-11-15
CVE-2017-11878 HIGH 7.8 2017-11-15 Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsof…	HIGH 7.8	—		2017-11-15
CVE-2017-11877 MEDIUM 5.5 2017-11-15 Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsof…	MEDIUM 5.5	—		2017-11-15
CVE-2017-11874 LOW 3.1 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run ar…	LOW 3.1	—	Microsoft Edge	2017-11-15
CVE-2017-11873 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same us…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11872 MEDIUM 6.5 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restric…	MEDIUM 6.5	—	Microsoft Edge	2017-11-15
CVE-2017-11871 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, d…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11870 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, d…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11866 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11863 MEDIUM 6.1 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick a user in…	MEDIUM 6.1	—	Microsoft Edge	2017-11-15
CVE-2017-11862 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to h…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11861 HIGH 7.5 Microsoft Edge 2017-11-15 Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the curr…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11858 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Mi…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11854 HIGH 8.8 2017-11-15 Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service P…	HIGH 8.8	—		2017-11-15
CVE-2017-11846 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Mi…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11845 HIGH 7.5 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles …	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11844 MEDIUM 4.3 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's sy…	MEDIUM 4.3	—	Microsoft Edge	2017-11-15
CVE-2017-11843 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Micros…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11841 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11840 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the s…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11839 HIGH 7.5 Microsoft Edge 2017-11-15 Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take control of an affect…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11838 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft …	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11837 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft …	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11836 HIGH 7.5 Microsoft Edge 2017-11-15 ChakraCore, and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11833 LOW 3.1 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the o…	LOW 3.1	—	Microsoft Edge	2017-11-15
CVE-2017-11827 HIGH 7.5 Microsoft Edge 2017-11-15 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and In…	HIGH 7.5	—	Microsoft Edge	2017-11-15
CVE-2017-11803 MEDIUM 4.3 Microsoft Edge 2017-11-15 Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's sy…	MEDIUM 4.3	—	Microsoft Edge	2017-11-15
CVE-2017-11791 LOW 3.1 Microsoft Edge 2017-11-15 ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, an…	LOW 3.1	—	Microsoft Edge	2017-11-15
CVE-2017-11880 HIGH · vendor Windows 2017-11-14 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11853 HIGH · vendor Windows 2017-11-14 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11851 HIGH · vendor Windows 2017-11-14 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11850 HIGH · vendor Windows 2017-11-14 Microsoft Graphics Component Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11849 HIGH · vendor Windows 2017-11-14 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11847 HIGH · vendor Windows 2017-11-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11842 HIGH · vendor Windows 2017-11-14 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11831 HIGH · vendor Windows 2017-11-14 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11830 HIGH · vendor Windows 2017-11-14 Device Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11788 HIGH · vendor Windows 2017-11-14 Windows Search Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-11768 HIGH · vendor Windows 2017-11-14 Windows Media Player Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-11-14
CVE-2017-5122 HIGH 8.8 2017-10-27 Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access vi…	HIGH 8.8	—		2017-10-27
CVE-2017-5121 HIGH 8.8 2017-10-27 Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary …	HIGH 8.8	—		2017-10-27
CVE-2017-5117 MEDIUM 6.5 2017-10-27 Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive in…	MEDIUM 6.5	—		2017-10-27
CVE-2017-5115 HIGH 8.8 2017-10-27 Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML p…	HIGH 8.8	—		2017-10-27
CVE-2017-5112 HIGH 8.8 2017-10-27 Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a cra…	HIGH 8.8	—		2017-10-27
CVE-2017-5111 HIGH 8.8 2017-10-27 A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruptio…	HIGH 8.8	—		2017-10-27

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM