Vulnerabilities
Tracked app vulnerabilities
29,068 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,068
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-6506
MEDIUM 6.5
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted … |
|
CVE-2020-6505
CRITICAL 9.6
Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
|
CVE-2020-15801
CRITICAL 9.8
In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name… |
|
CVE-2020-1465
HIGH 7.8
An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker… |
|
CVE-2020-1462
MEDIUM 4.3
An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based), aka 'Skype for Business via Microsoft E… |
|
CVE-2020-1448
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
|
CVE-2020-1447
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
|
CVE-2020-1446
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
|
CVE-2020-1445
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclos… |
|
CVE-2020-1433
MEDIUM 6.5
An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Information Disclos… |
|
CVE-2020-1349
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Co… |
|
CVE-2020-1342
MEDIUM 5.5
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose … |
|
CVE-2020-1468
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2020-1463
HIGH · vendor
Windows SharedStream Library Elevation of Privilege Vulnerability |
|
CVE-2020-1438
HIGH · vendor
Windows Network Connections Service Elevation of Privilege Vulnerability |
|
CVE-2020-1437
HIGH · vendor
Windows Network Location Awareness Service Elevation of Privilege Vulnerability |
|
CVE-2020-1436
CRITICAL · vendor
Windows Font Library Remote Code Execution Vulnerability |
|
CVE-2020-1435
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-1434
HIGH · vendor
Windows Sync Host Service Elevation of Privilege Vulnerability |
|
CVE-2020-1431
HIGH · vendor
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability |
|
CVE-2020-1430
HIGH · vendor
Windows UPnP Device Host Elevation of Privilege Vulnerability |
|
CVE-2020-1429
HIGH · vendor
Windows Error Reporting Manager Elevation of Privilege Vulnerability |
|
CVE-2020-1428
HIGH · vendor
Windows Network Connections Service Elevation of Privilege Vulnerability |
|
CVE-2020-1427
HIGH · vendor
Windows Network Connections Service Elevation of Privilege Vulnerability |
|
CVE-2020-1426
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2020-1424
HIGH · vendor
Windows Update Stack Elevation of Privilege Vulnerability |
|
CVE-2020-1423
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2020-1422
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1421
CRITICAL · vendor
LNK Remote Code Execution Vulnerability |
|
CVE-2020-1420
HIGH · vendor
Windows Error Reporting Information Disclosure Vulnerability |
|
CVE-2020-1419
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2020-1418
HIGH · vendor
Windows Diagnostics Hub Elevation of Privilege Vulnerability |
|
CVE-2020-1415
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1414
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1413
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1412
HIGH · vendor
Microsoft Graphics Components Remote Code Execution Vulnerability |
|
CVE-2020-1411
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-1410
CRITICAL · vendor
Windows Address Book Remote Code Execution Vulnerability |
|
CVE-2020-1409
CRITICAL · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2020-1408
HIGH · vendor
Microsoft Graphics Remote Code Execution Vulnerability |
|
CVE-2020-1407
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-1406
HIGH · vendor
Windows Network List Service Elevation of Privilege Vulnerability |
|
CVE-2020-1405
HIGH · vendor
Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability |
|
CVE-2020-1404
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1402
HIGH · vendor
Windows ActiveX Installer Service Elevation of Privilege Vulnerability |
|
CVE-2020-1401
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-1400
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-1399
HIGH · vendor
Windows Runtime Elevation of Privilege Vulnerability |
|
CVE-2020-1398
HIGH · vendor
Windows Lockscreen Elevation of Privilege Vulnerability |
|
CVE-2020-1397
HIGH · vendor
Windows Imaging Component Information Disclosure Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.