Vulnerabilities
Tracked app vulnerabilities
19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,930
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-0279
CRITICAL · vendor
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2017-0278
CRITICAL · vendor
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2017-0277
CRITICAL · vendor
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2017-0276
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2017-0275
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2017-0274
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2017-0273
HIGH · vendor
Windows SMB Denial of Service Vulnerability |
|
CVE-2017-0272
CRITICAL · vendor
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2017-0271
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2017-0270
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2017-0269
HIGH · vendor
Windows SMB Denial of Service Vulnerability |
|
CVE-2017-0268
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2017-0267
HIGH · vendor
Windows SMB Information Disclosure Vulnerability |
|
CVE-2017-0263
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0259
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-0258
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2017-0246
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0214
HIGH · vendor
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2017-0213
Windows COM Elevation of Privilege Vulnerability |
|
CVE-2017-0212
HIGH · vendor
Windows Hyper-V vSMB Elevation of Privilege Vulnerability |
|
CVE-2017-0190
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0171
HIGH · vendor
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2017-0077
HIGH · vendor
Dxgkrnl.sys Elevation of Privilege Vulnerability |
|
CVE-2017-5043
HIGH 8.8
Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perfor… |
|
CVE-2017-5041
MEDIUM 4.3
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site v… |
|
CVE-2017-5038
MEDIUM 6.3
Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perfor… |
|
CVE-2017-5035
HIGH 8.1
Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site. |
|
CVE-2017-5034
HIGH 8.8
A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a… |
|
CVE-2017-5032
HIGH 8.8
PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially ex… |
|
CVE-2017-5031
HIGH 8.8
A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HT… |
|
CVE-2014-9654
CRITICAL 9.8
The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calcul… |
|
CVE-2016-5168
HIGH 7.5
Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information. |
|
CVE-2013-6662
MEDIUM 6.5
Google Chrome caches TLS sessions before certificate validation occurs. |
|
CVE-2017-0208
MEDIUM 4.3
An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who s… |
|
CVE-2017-0205
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way th… |
|
CVE-2017-0204
MEDIUM 5.5
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to bypass the Office Prot… |
|
CVE-2017-0203
MEDIUM 4.3
A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. An attacke… |
|
CVE-2017-0200
HIGH 7.5
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way th… |
|
CVE-2017-0194
MEDIUM 5.5
Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memor… |
|
CVE-2017-0106
HIGH 7.8
Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code o… |
|
CVE-2017-0093
HIGH 7.5
A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory in Microsoft browse… |
|
CVE-2013-6647
CRITICAL 9.8
A use-after-free in AnimationController::endAnimationUpdate in Google Chrome. |
|
CVE-2017-0211
HIGH · vendor
Windows OLE Elevation of Privilege Vulnerability |
|
CVE-2017-0192
HIGH · vendor
OpenType Font Driver Information Disclosure Vulnerability |
|
CVE-2017-0191
HIGH · vendor
Windows IPSec Denial of Service Vulnerability |
|
CVE-2017-0189
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0188
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2017-0186
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0185
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0184
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.