Vulnerabilities
Tracked app vulnerabilities
19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,930
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-8672
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use… |
|
CVE-2017-8671
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use… |
|
CVE-2017-8670
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due … |
|
CVE-2017-8669
HIGH 7.5
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607,… |
|
CVE-2017-8662
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to disclose information due to how strings are validated in specific scenarios, aka "Microsoft E… |
|
CVE-2017-8661
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due … |
|
CVE-2017-8659
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system due to the Chakra scripting engine… |
|
CVE-2017-8657
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current use… |
|
CVE-2017-8656
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due … |
|
CVE-2017-8655
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the curre… |
|
CVE-2017-8653
HIGH 7.5
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold,… |
|
CVE-2017-8652
MEDIUM 6.5
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft… |
|
CVE-2017-8650
MEDIUM 5.4
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to exploit a security feature bypass due to Microsoft Edge not properly enforcing same-origin po… |
|
CVE-2017-8647
HIGH 7.5
Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScr… |
|
CVE-2017-8646
HIGH 7.5
Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to t… |
|
CVE-2017-8645
HIGH 7.5
Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to t… |
|
CVE-2017-8644
MEDIUM 4.3
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the way that Microsoft… |
|
CVE-2017-8642
MEDIUM 6.1
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to elevate privileges due to the way that Microsoft Edge validates JavaScript under specific con… |
|
CVE-2017-8641
HIGH 7.5
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1… |
|
CVE-2017-8640
HIGH 7.5
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user du… |
|
CVE-2017-8639
HIGH 7.5
Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way… |
|
CVE-2017-8638
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft brows… |
|
CVE-2017-8637
MEDIUM 5.3
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to bypass Arbitrary Code Guard (ACG) due to how Microsoft Edge accesses memory in code compiled … |
|
CVE-2017-8636
HIGH 7.5
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1… |
|
CVE-2017-8635
HIGH 7.5
Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1… |
|
CVE-2017-8634
HIGH 7.5
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft brows… |
|
CVE-2017-8503
HIGH 8.8
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to escape from the AppContainer sandbox, aka "Microsoft Edg… |
|
CVE-2017-0293
HIGH 7.5
Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, a… |
|
CVE-2017-8673
HIGH · vendor
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability |
|
CVE-2017-8666
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2017-8664
HIGH · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2017-8633
HIGH · vendor
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2017-8627
HIGH · vendor
Windows Subsystem for Linux Denial of Service Vulnerability |
|
CVE-2017-8624
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2017-8623
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2017-8622
CRITICAL · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2017-8620
CRITICAL · vendor
Windows Search Remote Code Execution Vulnerability |
|
CVE-2017-8593
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-8591
CRITICAL · vendor
Windows IME Remote Code Execution Vulnerability |
|
CVE-2017-0250
CRITICAL · vendor
Microsoft JET Database Engine Remote Code Execution Vulnerability |
|
CVE-2017-0174
HIGH · vendor
Windows NetBIOS Denial of Service Vulnerability |
|
CVE-2017-8663
HIGH 7.8
Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a remote code exec… |
|
CVE-2017-8572
MEDIUM 5.5
Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows an information dis… |
|
CVE-2017-8571
HIGH 7.8
Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a security feature… |
|
CVE-2017-9233
HIGH 7.5
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malfo… |
|
CVE-2017-0196
MEDIUM 6.5
An information disclosure vulnerability in Microsoft scripting engine allows remote attackers to obtain sensitive information from process memory via a crafted… |
|
CVE-2017-0152
HIGH 8.1
A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers. The v… |
|
CVE-2017-0028
CRITICAL 9.8
A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could corrupt memory in a… |
|
CVE-2017-8619
HIGH 7.5
Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scr… |
|
CVE-2017-8617
HIGH 7.5
Microsoft Edge in Windows 10 1703 Microsoft Edge allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handl… |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.