Vulnerabilities
Tracked app vulnerabilities
29,068 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,068
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-0848
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0831
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0830
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corr… |
|
CVE-2020-0829
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0828
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0827
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0826
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0825
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0823
HIGH 7.5
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
|
CVE-2020-0816
HIGH 8.8
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. |
|
CVE-2020-0813
HIGH 7.5
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to… |
|
CVE-2020-0812
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra… |
|
CVE-2020-0811
HIGH 7.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra… |
|
CVE-2020-0796
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S… |
|
CVE-2020-0787
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows … |
|
CVE-2020-0768
HIGH 7.5
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corr… |
|
CVE-2013-1753
The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a… |
|
CVE-2020-0898
HIGH · vendor
Windows Graphics Component Elevation of Privilege Vulnerability |
|
CVE-2020-0897
HIGH · vendor
Windows Work Folder Service Elevation of Privilege Vulnerability |
|
CVE-2020-0896
HIGH · vendor
Windows Hard Link Elevation of Privilege Vulnerability |
|
CVE-2020-0887
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-0885
HIGH · vendor
Windows Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-0883
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-0882
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2020-0881
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2020-0880
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2020-0879
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2020-0877
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-0876
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2020-0874
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2020-0871
HIGH · vendor
Windows Network Connections Service Information Disclosure Vulnerability |
|
CVE-2020-0869
CRITICAL · vendor
Media Foundation Memory Corruption Vulnerability |
|
CVE-2020-0868
HIGH · vendor
Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
|
CVE-2020-0867
HIGH · vendor
Windows Update Orchestrator Service Elevation of Privilege Vulnerability |
|
CVE-2020-0866
HIGH · vendor
Windows Work Folder Service Elevation of Privilege Vulnerability |
|
CVE-2020-0865
HIGH · vendor
Windows Work Folder Service Elevation of Privilege Vulnerability |
|
CVE-2020-0864
HIGH · vendor
Windows Work Folder Service Elevation of Privilege Vulnerability |
|
CVE-2020-0863
HIGH · vendor
Connected User Experiences and Telemetry Service Information Disclosure Vulnerability |
|
CVE-2020-0861
HIGH · vendor
Windows Network Driver Interface Specification (NDIS) Information Disclosure Vulnerability |
|
CVE-2020-0860
HIGH · vendor
Windows ActiveX Installer Service Elevation of Privilege Vulnerability |
|
CVE-2020-0859
HIGH · vendor
Windows Modules Installer Service Information Disclosure Vulnerability |
|
CVE-2020-0858
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-0857
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0854
HIGH · vendor
Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability |
|
CVE-2020-0853
HIGH · vendor
Windows Imaging Component Information Disclosure Vulnerability |
|
CVE-2020-0849
HIGH · vendor
Windows Hard Link Elevation of Privilege Vulnerability |
|
CVE-2020-0845
HIGH · vendor
Windows Network Connections Service Elevation of Privilege Vulnerability |
|
CVE-2020-0844
HIGH · vendor
Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability |
|
CVE-2020-0843
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
|
CVE-2020-0842
HIGH · vendor
Windows Installer Elevation of Privilege Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.