Vulnerabilities
Tracked app vulnerabilities
19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,930
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-8737
HIGH 7.5
Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 20… |
|
CVE-2017-8736
MEDIUM 4.3
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and Microsoft Edge and Intern… |
|
CVE-2017-8735
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user by redirecting the user to a speciall… |
|
CVE-2017-8734
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre… |
|
CVE-2017-8731
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the… |
|
CVE-2017-8729
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft … |
|
CVE-2017-8728
HIGH 7.5
Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 20… |
|
CVE-2017-8724
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way t… |
|
CVE-2017-8723
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malici… |
|
CVE-2017-8660
HIGH 8.8
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use… |
|
CVE-2017-8649
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due… |
|
CVE-2017-8643
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to leave a malicious website open during user clipboa… |
|
CVE-2017-8632
A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack … |
|
CVE-2017-8631
A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 … |
|
CVE-2017-11766
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre… |
|
CVE-2017-11764
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due… |
|
CVE-2017-9417
Broadcom BCM43xx Remote Code Execution Vulnerability |
|
CVE-2017-8746
HIGH · vendor
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability |
|
CVE-2017-8720
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-8719
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8716
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2017-8714
HIGH · vendor
Remote Desktop Virtual Host Remote Code Execution Vulnerability |
|
CVE-2017-8713
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2017-8712
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2017-8711
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2017-8709
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8708
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8707
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2017-8706
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2017-8704
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-8702
HIGH · vendor
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2017-8699
HIGH · vendor
Windows Shell Remote Code Execution Vulnerability |
|
CVE-2017-8695
HIGH · vendor
Windows Uniscribe Information Disclosure Vulnerability |
|
CVE-2017-8692
HIGH · vendor
Windows Uniscribe Remote Code Execution Vulnerability |
|
CVE-2017-8688
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-8687
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2017-8686
CRITICAL · vendor
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2017-8683
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2017-8682
CRITICAL · vendor
Win32k Graphics Remote Code Execution Vulnerability |
|
CVE-2017-8681
HIGH · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2017-8679
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8678
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8677
HIGH · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2017-8676
CRITICAL · vendor
Windows GDI+ Information Disclosure Vulnerability |
|
CVE-2017-8675
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-8628
HIGH · vendor
Microsoft Bluetooth Driver Spoofing Vulnerability |
|
CVE-2017-0161
CRITICAL · vendor
NetBIOS Remote Code Execution Vulnerability |
|
CVE-2014-4616
Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to re… |
|
CVE-2017-8518
HIGH 7.5
Microsoft Edge allows a remote code execution vulnerability due to the way it accesses objects in memory, aka "Scripting Engine Memory Corruption Vulnerability… |
|
CVE-2017-8674
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft brows… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.