Vulnerabilities
Tracked app vulnerabilities
29,068 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,068
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-0097
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0096
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0094
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0093
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0092
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0091
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0090
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0065
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0064
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-0024
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-19536
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14087
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14078
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14077
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14067
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14066
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14054
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-14053
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2020-6825
CRITICAL 9.8
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these… |
|
CVE-2020-6822
HIGH 8.8
On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecodeData</code>. It is possible that with … |
|
CVE-2020-6821
HIGH 7.5
When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the returne… |
|
CVE-2020-6820
HIGH 8.1
KEV
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing thi… |
|
CVE-2020-6819
HIGH 8.1
KEV
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abu… |
|
CVE-2020-0980
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
|
CVE-2020-0970
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0969
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra … |
|
CVE-2020-0935
MEDIUM 5.5
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows E… |
|
CVE-2020-0906
HIGH 8.8
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
|
CVE-2020-0760
HIGH 8.8
+2
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulne… |
|
CVE-2020-11765
MEDIUM 5.5
An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, le… |
|
CVE-2020-11764
MEDIUM 5.5
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp. |
|
CVE-2020-11763
MEDIUM 5.5
An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp. |
|
CVE-2020-11762
MEDIUM 5.5
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling th… |
|
CVE-2020-11761
MEDIUM 5.5
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfF… |
|
CVE-2020-11760
MEDIUM 5.5
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp. |
|
CVE-2020-11759
MEDIUM 5.5
An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineB… |
|
CVE-2020-11758
MEDIUM 5.5
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h. |
|
CVE-2020-1094
HIGH · vendor
Windows Work Folder Service Elevation of Privilege Vulnerability |
|
CVE-2020-1029
HIGH · vendor
Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability |
|
CVE-2020-1027
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2020-1020
Adobe Font Manager Library Remote Code Execution Vulnerability |
|
CVE-2020-1017
HIGH · vendor
Windows Push Notification Service Elevation of Privilege Vulnerability |
|
CVE-2020-1016
HIGH · vendor
Windows Push Notification Service Information Disclosure Vulnerability |
|
CVE-2020-1015
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-1014
HIGH · vendor
Microsoft Windows Update Client Elevation of Privilege Vulnerability |
|
CVE-2020-1011
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-1009
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-1008
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2020-1007
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2020-1006
HIGH · vendor
Windows Push Notification Service Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.