Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,930
Actively exploited
303
Publication window
1997-01-01 → 2026-10-30

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all
CVE
CVE-2017-8737
HIGH 7.5

Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 20…

CVE-2017-8736
MEDIUM 4.3

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Intern…

CVE-2017-8735
MEDIUM 4.3

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user by redirecting the user to a speciall…

CVE-2017-8734
HIGH 7.5

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre…

CVE-2017-8731
HIGH 7.5

Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the…

CVE-2017-8729
HIGH 7.5

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft …

CVE-2017-8728
HIGH 7.5

Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 20…

CVE-2017-8724
MEDIUM 4.3

Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way t…

CVE-2017-8723
MEDIUM 4.3

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malici…

CVE-2017-8660
HIGH 8.8

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use…

CVE-2017-8649
HIGH 7.5

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due…

CVE-2017-8643
MEDIUM 4.3

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to leave a malicious website open during user clipboa…

CVE-2017-8632
HIGH 7.8

A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack …

CVE-2017-8631
HIGH 7.8

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 …

CVE-2017-11766
HIGH 7.5

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre…

CVE-2017-11764
HIGH 7.5

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due…

CVE-2017-9417
CRITICAL · vendor

Broadcom BCM43xx Remote Code Execution Vulnerability

CVE-2017-8746
HIGH · vendor

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

CVE-2017-8720
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2017-8719
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2017-8716
HIGH · vendor

Windows Security Feature Bypass Vulnerability

CVE-2017-8714
HIGH · vendor

Remote Desktop Virtual Host Remote Code Execution Vulnerability

CVE-2017-8713
HIGH · vendor

Windows Hyper-V Information Disclosure Vulnerability

CVE-2017-8712
HIGH · vendor

Windows Hyper-V Information Disclosure Vulnerability

CVE-2017-8711
HIGH · vendor

Windows Hyper-V Information Disclosure Vulnerability

CVE-2017-8709
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2017-8708
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2017-8707
HIGH · vendor

Windows Hyper-V Information Disclosure Vulnerability

CVE-2017-8706
HIGH · vendor

Windows Hyper-V Information Disclosure Vulnerability

CVE-2017-8704
HIGH · vendor

Hyper-V Denial of Service Vulnerability

CVE-2017-8702
HIGH · vendor

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2017-8699
HIGH · vendor

Windows Shell Remote Code Execution Vulnerability

CVE-2017-8695
HIGH · vendor

Windows Uniscribe Information Disclosure Vulnerability

CVE-2017-8692
HIGH · vendor

Windows Uniscribe Remote Code Execution Vulnerability

CVE-2017-8688
HIGH · vendor

Windows GDI Information Disclosure Vulnerability

CVE-2017-8687
HIGH · vendor

Win32k Information Disclosure Vulnerability

CVE-2017-8686
CRITICAL · vendor

Windows DHCP Server Remote Code Execution Vulnerability

CVE-2017-8683
HIGH · vendor

Microsoft Graphics Component Information Disclosure Vulnerability

CVE-2017-8682
CRITICAL · vendor

Win32k Graphics Remote Code Execution Vulnerability

CVE-2017-8681
HIGH · vendor

Windows GDI+ Information Disclosure Vulnerability

CVE-2017-8679
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2017-8678
HIGH · vendor

Windows Kernel Information Disclosure Vulnerability

CVE-2017-8677
HIGH · vendor

Windows GDI+ Information Disclosure Vulnerability

CVE-2017-8676
CRITICAL · vendor

Windows GDI+ Information Disclosure Vulnerability

CVE-2017-8675
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2017-8628
HIGH · vendor

Microsoft Bluetooth Driver Spoofing Vulnerability

CVE-2017-0161
CRITICAL · vendor

NetBIOS Remote Code Execution Vulnerability

CVE-2014-4616
MEDIUM 5.9

Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to re…

CVE-2017-8518
HIGH 7.5

Microsoft Edge allows a remote code execution vulnerability due to the way it accesses objects in memory, aka "Scripting Engine Memory Corruption Vulnerability…

CVE-2017-8674
HIGH 7.5

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft brows…

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM