Vulnerabilities
Tracked app vulnerabilities
19,930 CVEs affect a tracked app or OS (all severities, Windows). 303 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 19,930
- Actively exploited
- 303
- Publication window
- 1997-01-01 → 2026-10-30
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2016-7271
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2016-7260
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-7259
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-7258
HIGH · vendor
Windows Kernel Memory Information Disclosure Vulnerability |
|
CVE-2016-7219
HIGH · vendor
Windows Crypto Driver Information Disclosure Vulnerability |
|
CVE-2016-9535
CRITICAL 9.8
tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when d… |
|
CVE-2016-7255
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window… |
|
CVE-2016-7244
MEDIUM 5.5
Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial o… |
|
CVE-2016-7243
HIGH 7.5
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
|
CVE-2016-7242
HIGH 7.5
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
|
CVE-2016-7241
HIGH 7.5
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft… |
|
CVE-2016-7240
HIGH 7.5
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
|
CVE-2016-7239
LOW 3.1
The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) … |
|
CVE-2016-7236
HIGH 7.8
Microsoft Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary … |
|
CVE-2016-7235
HIGH 7.8
Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, and Office Compatibility Pack SP3 allow remote attackers to execute… |
|
CVE-2016-7234
HIGH 7.8
Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Excel for Mac 2011, Word 2016 for Mac, Office Compatib… |
|
CVE-2016-7233
MEDIUM 6.5
Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Service… |
|
CVE-2016-7232
HIGH 7.8
Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via … |
|
CVE-2016-7231
HIGH 7.8
Microsoft Excel 2007 SP3, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Of… |
|
CVE-2016-7230
HIGH 7.8
Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, … |
|
CVE-2016-7229
HIGH 7.8
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3,… |
|
CVE-2016-7228
HIGH 7.8
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Office Compatibility Pack … |
|
CVE-2016-7227
LOW 3.1
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of local files via unspe… |
|
CVE-2016-7213
HIGH 7.8
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Office Compatibility Pack … |
|
CVE-2016-7209
MEDIUM 5.3
Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability." |
|
CVE-2016-7208
HIGH 7.5
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
|
CVE-2016-7204
LOW 3.1
Microsoft Edge allows remote attackers to access arbitrary "My Documents" files via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerabilit… |
|
CVE-2016-7203
HIGH 7.5
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
|
CVE-2016-7202
HIGH 7.5
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of serv… |
|
CVE-2016-7201
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
|
CVE-2016-7200
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
|
CVE-2016-7199
LOW 3.1
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the Same Origin Policy and obtain sensitive window-state informati… |
|
CVE-2016-7198
HIGH 7.5
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… |
|
CVE-2016-7196
HIGH 7.5
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via … |
|
CVE-2016-7195
HIGH 7.5
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… |
|
CVE-2016-7256
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2016-7248
CRITICAL · vendor
Microsoft Video Control Remote Code Execution Vulnerability |
|
CVE-2016-7247
HIGH · vendor
Secure Boot Component Security Feature Bypass Vulnerability |
|
CVE-2016-7246
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2016-7238
HIGH · vendor
Windows NTLM Elevation of Privilege Vulnerability |
|
CVE-2016-7237
HIGH · vendor
Local Security Authority Subsystem Service Denial of Service Vulnerability |
|
CVE-2016-7226
HIGH · vendor
VHD Driver Elevation of Privilege Vulnerability |
|
CVE-2016-7225
HIGH · vendor
VHD Driver Elevation of Privilege Vulnerability |
|
CVE-2016-7224
HIGH · vendor
VHD Driver Elevation of Privilege Vulnerability |
|
CVE-2016-7223
HIGH · vendor
VHD Driver Elevation of Privilege Vulnerability |
|
CVE-2016-7222
HIGH · vendor
Task Scheduler Elevation of Privilege Vulnerability |
|
CVE-2016-7221
HIGH · vendor
Windows IME Elevation of Privilege Vulnerability |
|
CVE-2016-7218
HIGH · vendor
Windows Bowser.sys Information Disclosure Vulnerability |
|
CVE-2016-7217
HIGH · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2016-7215
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.