Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerabilities

Tracked app vulnerabilities

19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs
19,930
Actively exploited
303
Publication window
1997-01-01 → 2026-10-30

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

19,930 entries Windows Clear all
CVE
CVE-2017-0023
HIGH 7.5

The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute a…

CVE-2017-0020
HIGH 7.8

Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial…

CVE-2017-0019
HIGH 7.8

Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft O…

CVE-2017-0017
MEDIUM 6.1

The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via …

CVE-2017-0015
HIGH 7.5

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…

CVE-2017-0012
MEDIUM 4.3

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerabi…

CVE-2017-0011
MEDIUM 4.3

Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." This …

CVE-2017-0010
HIGH 7.5

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes…

CVE-2017-0006
HIGH 7.8

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbit…

CVE-2016-10196
HIGH 7.5

Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service …

CVE-2017-0148
CRITICAL · vendor KEV

Windows SMB Remote Code Execution Vulnerability

CVE-2017-0147
HIGH · vendor KEV

Windows SMB Information Disclosure Vulnerability

CVE-2017-0146
CRITICAL · vendor KEV

Windows SMB Remote Code Execution Vulnerability

CVE-2017-0143
CRITICAL · vendor KEV

Windows SMB Remote Code Execution Vulnerability

CVE-2017-0121
HIGH · vendor

Windows Uniscribe Information Disclosure Vulnerability

CVE-2017-0118
HIGH · vendor

Windows Uniscribe Information Disclosure Vulnerability

CVE-2017-0109
CRITICAL · vendor

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2017-0104
CRITICAL · vendor

iSNS Server Memory Corruption Vulnerability

CVE-2017-0102
HIGH · vendor

Windows Elevation of Privilege Vulnerability

CVE-2017-0100
HIGH · vendor

Windows COM Session Elevation of Privilege Vulnerability

CVE-2017-0099
HIGH · vendor

Hyper-V Denial of Service Vulnerability

CVE-2017-0098
HIGH · vendor

Hyper-V Denial of Service Vulnerability

CVE-2017-0097
HIGH · vendor

Hyper-V Denial of Service Vulnerability

CVE-2017-0096
HIGH · vendor

Windows Hyper-V Information Disclosure Vulnerability

CVE-2017-0095
HIGH · vendor

Hyper-V vSMB Remote Code Execution Vulnerability

CVE-2017-0084
CRITICAL · vendor

Windows Uniscribe Remote Code Execution Vulnerability

CVE-2017-0082
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2017-0081
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2017-0080
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2017-0079
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2017-0078
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2017-0076
HIGH · vendor

Hyper-V Denial of Service Vulnerability

CVE-2017-0075
CRITICAL · vendor

Windows Hyper-V Remote Code Execution Vulnerability

CVE-2017-0074
HIGH · vendor

Hyper-V Denial of Service Vulnerability

CVE-2017-0073
HIGH · vendor

Windows GDI Information Disclosure Vulnerability

CVE-2017-0063
HIGH · vendor

Microsoft Color Management Information Disclosure Vulnerability

CVE-2017-0062
HIGH · vendor

Windows GDI Information Disclosure Vulnerability

CVE-2017-0060
HIGH · vendor

Windows GDI Information Disclosure Vulnerability

CVE-2017-0057
HIGH · vendor

Windows DNS Query Information Disclosure Vulnerability

CVE-2017-0056
HIGH · vendor

Windows Kernel Elevation of Privilege Vulnerability

CVE-2017-0055
HIGH · vendor

Microsoft IIS Server XSS Elevation of Privilege Vulnerability

CVE-2017-0051
HIGH · vendor

Hyper-V Denial of Service Vulnerability

CVE-2017-0050
HIGH · vendor

Windows Elevation of Privilege Vulnerability

CVE-2017-0047
HIGH · vendor

Windows GDI Elevation of Privilege Vulnerability

CVE-2017-0043
HIGH · vendor

Microsoft Active Directory Federation Services Information Disclosure

CVE-2017-0042
HIGH · vendor

Windows DirectShow Information Disclosure Vulnerability

CVE-2017-0038
HIGH · vendor

Windows GDI Information Disclosure Vulnerability

CVE-2017-0026
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

CVE-2017-0025
HIGH · vendor

Windows GDI Elevation of Privilege Vulnerability

CVE-2017-0024
HIGH · vendor

Win32k Elevation of Privilege Vulnerability

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM