Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,930
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-30

All CVEs 19,930 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2017-11792 HIGH 7.5 Microsoft Edge 2017-10-13 ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, due to how the scrip…	HIGH 7.5	—	Microsoft Edge	2017-10-13
CVE-2017-11776 HIGH 7.5 2017-10-13 Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka "Microsoft Outlook I…	HIGH 7.5	—		2017-10-13
CVE-2017-11774 HIGH 7.8 KEV 2017-10-13 Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles …	HIGH 7.8	KEV		2017-10-13
CVE-2017-8727 CRITICAL · vendor Windows 2017-10-10 Internet Explorer Memory Corruption Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-8718 HIGH · vendor Windows 2017-10-10 Microsoft JET Database Engine Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-8717 HIGH · vendor Windows 2017-10-10 Microsoft JET Database Engine Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-8715 HIGH · vendor Windows 2017-10-10 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-8703 HIGH · vendor Windows 2017-10-10 Windows Subsystem for Linux Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-8694 HIGH · vendor Windows 2017-10-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-8693 HIGH · vendor Windows 2017-10-10 Microsoft Graphics Component Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-8689 HIGH · vendor Windows 2017-10-10 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-13080 HIGH · vendor Android Windows 2017-10-10 Windows Wireless WPA Group Key Reinstallation Vulnerability	HIGH · vendor	—	Android Windows	2017-10-10
CVE-2017-11829 HIGH · vendor Windows 2017-10-10 Windows Update Delivery Optimization Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11824 HIGH · vendor Windows 2017-10-10 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11823 HIGH · vendor Windows 2017-10-10 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11818 HIGH · vendor Windows 2017-10-10 Windows Storage Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11817 HIGH · vendor Windows 2017-10-10 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11816 HIGH · vendor Windows 2017-10-10 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11815 HIGH · vendor Windows 2017-10-10 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11814 HIGH · vendor Windows 2017-10-10 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11785 HIGH · vendor Windows 2017-10-10 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11783 HIGH · vendor Windows 2017-10-10 Windows ALPC Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11782 HIGH · vendor Windows 2017-10-10 Windows SMB Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11781 HIGH · vendor Windows 2017-10-10 W - SMB - DOS Authenticated	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11780 HIGH · vendor Windows 2017-10-10 Windows SMB Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11779 CRITICAL · vendor Windows 2017-10-10 Windows DNSAPI Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-11772 HIGH · vendor Windows 2017-10-10 Microsoft Search Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11771 CRITICAL · vendor Windows 2017-10-10 Windows Search Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-11769 HIGH · vendor Windows 2017-10-10 TRIE Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11765 HIGH · vendor Windows 2017-10-10 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-10-10
CVE-2017-11763 CRITICAL · vendor Windows 2017-10-10 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2017-11762 CRITICAL · vendor Windows 2017-10-10 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-10-10
CVE-2015-1206 MEDIUM 5.5 2017-10-06 Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service (unpaged memory write and process crash) via a craf…	MEDIUM 5.5	—		2017-10-06
CVE-2017-1000117 HIGH 8.8 Git 2017-10-05 A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on …	HIGH 8.8	—	Git	2017-10-05
CVE-2017-14867 HIGH · vendor Git 2017-09-29 Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands s…	HIGH · vendor	—	Git	2017-09-29
CVE-2017-8757 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8756 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8755 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8754 MEDIUM 4.2 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malici…	MEDIUM 4.2	—	Microsoft Edge	2017-09-13
CVE-2017-8753 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8752 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8751 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge ac…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8750 HIGH 7.5 Microsoft Edge 2017-09-13 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Intern…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8748 HIGH 7.5 Microsoft Edge 2017-09-13 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Intern…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8743 HIGH 7.8 2017-09-13 A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail…	HIGH 7.8	—		2017-09-13
CVE-2017-8742 HIGH 7.8 2017-09-13 A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 S…	HIGH 7.8	—		2017-09-13
CVE-2017-8741 HIGH 7.5 Microsoft Edge 2017-09-13 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Expl…	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8740 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft …	HIGH 7.5	—	Microsoft Edge	2017-09-13
CVE-2017-8739 MEDIUM 4.3 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to the way that the Microsoft…	MEDIUM 4.3	—	Microsoft Edge	2017-09-13
CVE-2017-8738 HIGH 7.5 Microsoft Edge 2017-09-13 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use…	HIGH 7.5	—	Microsoft Edge	2017-09-13

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM