Vulnerabilities
Tracked app vulnerabilities
29,068 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,068
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2020-0636
HIGH · vendor
Windows Subsystem for Linux Elevation of Privilege Vulnerability |
|
CVE-2020-0635
HIGH · vendor
Windows Elevation of Privilege Vulnerability |
|
CVE-2020-0634
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2020-0633
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0632
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0631
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0630
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0629
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0628
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0627
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0626
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0625
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0624
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2020-0623
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0622
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-0621
HIGH · vendor
Windows Security Feature Bypass Vulnerability |
|
CVE-2020-0620
HIGH · vendor
Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
|
CVE-2020-0617
HIGH · vendor
Hyper-V Denial of Service Vulnerability |
|
CVE-2020-0616
HIGH · vendor
Microsoft Windows Denial of Service Vulnerability |
|
CVE-2020-0615
HIGH · vendor
Windows Common Log File System Driver Information Disclosure Vulnerability |
|
CVE-2020-0614
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0613
HIGH · vendor
Windows Search Indexer Elevation of Privilege Vulnerability |
|
CVE-2020-0612
HIGH · vendor
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
|
CVE-2020-0611
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2020-0610
CRITICAL · vendor
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
|
CVE-2020-0609
CRITICAL · vendor
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability |
|
CVE-2020-0608
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2020-0607
HIGH · vendor
Microsoft Graphics Component Information Disclosure Vulnerability |
|
CVE-2020-0601
Windows CryptoAPI Spoofing Vulnerability |
|
CVE-2020-6377
HIGH 8.8
Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
|
CVE-2019-13767
HIGH 8.8
Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
|
CVE-2019-20372
MEDIUM · vendor
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized … |
|
CVE-2019-17012
HIGH 8.8
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evidence of memory corruption and we presu… |
|
CVE-2019-17011
HIGH 7.5
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a po… |
|
CVE-2019-17010
HIGH 7.5
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-f… |
|
CVE-2019-17009
HIGH 7.8
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a … |
|
CVE-2019-17008
HIGH 8.8
When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vulnerability affects… |
|
CVE-2019-17005
HIGH 8.8
The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the static-sized array … |
|
CVE-2019-11764
HIGH 8.8
Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of these bugs showed evidence of memory c… |
|
CVE-2019-11763
MEDIUM 6.1
Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities. This could have led to HTML commen… |
|
CVE-2019-11762
MEDIUM 6.1
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/getters/setters on … |
|
CVE-2019-11761
MEDIUM 5.4
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this o… |
|
CVE-2019-11760
HIGH 8.8
A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some instances. This vuln… |
|
CVE-2019-11759
HIGH 8.8
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an attacker to execute a… |
|
CVE-2019-11758
HIGH 8.8
Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was installed. This bug showed evidence of memory c… |
|
CVE-2019-11757
HIGH 8.8
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use… |
|
CVE-2019-11745
HIGH 8.8
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. Th… |
|
CVE-2019-5846
MEDIUM 6.5
Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2019-5845
MEDIUM 6.5
Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
|
CVE-2019-5844
MEDIUM 6.5
Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.