Vulnerabilities
Tracked app vulnerabilities
19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,930
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2017-0023
HIGH 7.5
The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute a… |
|
CVE-2017-0020
Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial… |
|
CVE-2017-0019
Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft O… |
|
CVE-2017-0017
MEDIUM 6.1
The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via … |
|
CVE-2017-0015
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0012
MEDIUM 4.3
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerabi… |
|
CVE-2017-0011
MEDIUM 4.3
Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." This … |
|
CVE-2017-0010
HIGH 7.5
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. Thes… |
|
CVE-2017-0006
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbit… |
|
CVE-2016-10196
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service … |
|
CVE-2017-0148
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2017-0147
Windows SMB Information Disclosure Vulnerability |
|
CVE-2017-0146
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2017-0143
Windows SMB Remote Code Execution Vulnerability |
|
CVE-2017-0121
HIGH · vendor
Windows Uniscribe Information Disclosure Vulnerability |
|
CVE-2017-0118
HIGH · vendor
Windows Uniscribe Information Disclosure Vulnerability |
|
CVE-2017-0109
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2017-0104
CRITICAL · vendor
iSNS Server Memory Corruption Vulnerability |
|
CVE-2017-0102
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2017-0100
HIGH · vendor
Windows COM Session Elevation of Privilege Vulnerability |
|
CVE-2017-0099
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0098
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0097
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0096
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2017-0095
HIGH · vendor
Hyper-V vSMB Remote Code Execution Vulnerability |
|
CVE-2017-0084
CRITICAL · vendor
Windows Uniscribe Remote Code Execution Vulnerability |
|
CVE-2017-0082
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0081
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0080
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0079
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0078
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0076
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0075
CRITICAL · vendor
Windows Hyper-V Remote Code Execution Vulnerability |
|
CVE-2017-0074
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0073
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0063
HIGH · vendor
Microsoft Color Management Information Disclosure Vulnerability |
|
CVE-2017-0062
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0060
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0057
HIGH · vendor
Windows DNS Query Information Disclosure Vulnerability |
|
CVE-2017-0056
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2017-0055
HIGH · vendor
Microsoft IIS Server XSS Elevation of Privilege Vulnerability |
|
CVE-2017-0051
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2017-0050
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2017-0047
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2017-0043
HIGH · vendor
Microsoft Active Directory Federation Services Information Disclosure |
|
CVE-2017-0042
HIGH · vendor
Windows DirectShow Information Disclosure Vulnerability |
|
CVE-2017-0038
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2017-0026
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2017-0025
HIGH · vendor
Windows GDI Elevation of Privilege Vulnerability |
|
CVE-2017-0024
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.