Vulnerabilities
Tracked app vulnerabilities
19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,930
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-8522
HIGH 7.5
Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allo… |
|
CVE-2017-8521
HIGH 7.5
Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
|
CVE-2017-8520
HIGH 7.5
Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
|
CVE-2017-8513
A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Re… |
|
CVE-2017-8512
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8510
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8509
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8508
A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats, aka "Microsoft Office Secur… |
|
CVE-2017-8507
A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Office Memory Corrupt… |
|
CVE-2017-8506
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Executio… |
|
CVE-2017-8504
MEDIUM 4.3
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch … |
|
CVE-2017-8499
HIGH 7.5
Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fai… |
|
CVE-2017-8498
MEDIUM 4.3
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read data not intended to be disclosed when Edge allows JavaScript XM… |
|
CVE-2017-8497
HIGH 7.5
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge i… |
|
CVE-2017-8496
HIGH 7.5
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge i… |
|
CVE-2017-0292
HIGH 7.8
Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code exec… |
|
CVE-2017-8579
HIGH · vendor
DirectX Elevation of Privilege Vulnerability |
|
CVE-2017-8576
HIGH · vendor
Microsoft Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2017-8575
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2017-8554
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8553
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8544
HIGH · vendor
Windows Search Information Disclosure Vulnerability |
|
CVE-2017-8543
Windows Search Remote Code Execution Vulnerability |
|
CVE-2017-8533
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-8532
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-8531
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-8527
CRITICAL · vendor
Win32k Graphics Remote Code Execution Vulnerability |
|
CVE-2017-8515
HIGH · vendor
Windows VAD Cloning Denial of Service Vulnerability |
|
CVE-2017-8494
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2017-8493
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2017-8492
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8491
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8490
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8489
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8485
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8484
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8483
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8482
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8481
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8480
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8479
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8478
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8477
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8476
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8475
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8474
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8473
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8471
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8470
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-8468
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.