Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-1273
HIGH · vendor
Active Directory Federation Services XSS Vulnerability |
|
CVE-2019-1272
HIGH · vendor
Windows Data Sharing Service Elevation of Privilege Vulnerability |
|
CVE-2019-1271
HIGH · vendor
Windows Media Elevation of Privilege Vulnerability |
|
CVE-2019-1270
HIGH · vendor
Microsoft Windows Store Installer Elevation of Privilege Vulnerability |
|
CVE-2019-1269
HIGH · vendor
Windows ALPC Elevation of Privilege Vulnerability |
|
CVE-2019-1268
HIGH · vendor
Winlogon Elevation of Privilege Vulnerability |
|
CVE-2019-1267
HIGH · vendor
Microsoft Compatibility Appraiser Elevation of Privilege Vulnerability |
|
CVE-2019-1256
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1254
HIGH · vendor
Windows Hyper-V Information Disclosure Vulnerability |
|
CVE-2019-1253
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1252
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1251
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1250
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1249
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1248
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1247
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1246
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1245
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1244
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1243
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1242
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1241
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1240
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
|
CVE-2019-1235
HIGH · vendor
Windows Text Service Framework Elevation of Privilege Vulnerability |
|
CVE-2019-1232
HIGH · vendor
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability |
|
CVE-2019-1219
HIGH · vendor
Windows Transaction Manager Information Disclosure Vulnerability |
|
CVE-2019-1216
HIGH · vendor
DirectX Information Disclosure Vulnerability |
|
CVE-2019-1215
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1214
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2019-0928
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-0788
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-0787
CRITICAL · vendor
Remote Desktop Client Remote Code Execution Vulnerability |
|
CVE-2019-16056
HIGH 7.5
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addres… |
|
CVE-2019-14319
MEDIUM 6.5
The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker… |
|
CVE-2019-15903
HIGH 7.5
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCu… |
|
CVE-2019-9254
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2332
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2331
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2325
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2324
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2323
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2316
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2285
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2283
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2275
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2258
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2249
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2246
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2181
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2180
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.