Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 19,930
Actively exploited: 303
Publication window: 1997-01-01 → 2026-10-30

All CVEs 19,930 CISA KEV 303 Public exploit 566 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all

CVE	Severity	KEV	Apps	Published
CVE-2017-8466 HIGH · vendor Windows 2017-06-13 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-8465 HIGH · vendor Windows 2017-06-13 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-8464 CRITICAL · vendor KEV Windows 2017-06-13 LNK Remote Code Execution Vulnerability	CRITICAL · vendor	KEV	Windows	2017-06-13
CVE-2017-8462 HIGH · vendor Windows 2017-06-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-8460 HIGH · vendor Windows 2017-06-13 Windows PDF Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0300 HIGH · vendor Windows 2017-06-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0299 HIGH · vendor Windows 2017-06-13 Windows Kernel Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0298 HIGH · vendor Windows 2017-06-13 Windows COM Session Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0297 HIGH · vendor Windows 2017-06-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0296 HIGH · vendor Windows 2017-06-13 Windows TDX Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0295 HIGH · vendor Windows 2017-06-13 Windows Default Folder Tampering Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0294 CRITICAL · vendor Windows 2017-06-13 Windows Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-06-13
CVE-2017-0291 CRITICAL · vendor Windows 2017-06-13 Windows PDF Remote Code Execution	CRITICAL · vendor	—	Windows	2017-06-13
CVE-2017-0289 HIGH · vendor Windows 2017-06-13 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0288 HIGH · vendor Windows 2017-06-13 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0287 HIGH · vendor Windows 2017-06-13 Windows GDI Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0285 HIGH · vendor Windows 2017-06-13 Windows Uniscribe Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0284 HIGH · vendor Windows 2017-06-13 Windows Uniscribe Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0283 CRITICAL · vendor Windows 2017-06-13 Windows Uniscribe Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2017-06-13
CVE-2017-0282 HIGH · vendor Windows 2017-06-13 Windows Uniscribe Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0219 HIGH · vendor Windows 2017-06-13 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0218 HIGH · vendor Windows 2017-06-13 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0216 HIGH · vendor Windows 2017-06-13 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0215 HIGH · vendor Windows 2017-06-13 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0193 HIGH · vendor Windows 2017-06-13 Hypervisor Code Integrity Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2017-0173 HIGH · vendor Windows 2017-06-13 Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2017-06-13
CVE-2015-1207 MEDIUM 6.5 2017-06-06 Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (memory corruption a…	MEDIUM 6.5	—		2017-06-06
CVE-2016-5178 CRITICAL 9.8 2017-05-23 Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact vi…	CRITICAL 9.8	—		2017-05-23
CVE-2016-5177 HIGH 8.8 2017-05-23 Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecif…	HIGH 8.8	—		2017-05-23
CVE-2016-7804 HIGH 7.8 7-Zip 2017-05-22 Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified …	HIGH 7.8	—	7-Zip	2017-05-22
CVE-2017-0252 CRITICAL 9.8 Microsoft Edge 2017-05-15 A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engi…	CRITICAL 9.8	—	Microsoft Edge	2017-05-15
CVE-2017-0223 CRITICAL 9.8 Microsoft Edge 2017-05-15 A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engi…	CRITICAL 9.8	—	Microsoft Edge	2017-05-15
CVE-2017-0281 HIGH 7.8 2017-05-12 Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project…	HIGH 7.8	—		2017-05-12
CVE-2017-0266 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0254 HIGH 7.8 2017-05-12 Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP…	HIGH 7.8	—		2017-05-12
CVE-2017-0241 MEDIUM 5.3 Microsoft Edge 2017-05-12 An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions i…	MEDIUM 5.3	—	Microsoft Edge	2017-05-12
CVE-2017-0240 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0238 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0236 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0235 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0234 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scrip…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0233 HIGH 8.3 Microsoft Edge 2017-05-12 An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Micr…	HIGH 8.3	—	Microsoft Edge	2017-05-12
CVE-2017-0231 MEDIUM 4.3 Microsoft Edge 2017-05-12 A spoofing vulnerability exists when Microsoft browsers render SmartScreen Filter, aka "Microsoft Browser Spoofing Vulnerability."	MEDIUM 4.3	—	Microsoft Edge	2017-05-12
CVE-2017-0230 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0229 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0228 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine …	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0227 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Mic…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0224 HIGH 7.5 Microsoft Edge 2017-05-12 A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memo…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0221 HIGH 7.5 Microsoft Edge 2017-05-12 A vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This CVE ID is unique f…	HIGH 7.5	—	Microsoft Edge	2017-05-12
CVE-2017-0280 HIGH · vendor Windows 2017-05-09 Windows SMB Denial of Service Vulnerability	HIGH · vendor	—	Windows	2017-05-09

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM