Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-1126
HIGH · vendor
ADFS Security Feature Bypass Vulnerability |
|
CVE-2019-1124
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1123
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1122
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1121
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1120
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1119
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1118
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1117
HIGH · vendor
DirectWrite Remote Code Execution Vulnerability |
|
CVE-2019-1108
HIGH · vendor
Remote Desktop Protocol Client Information Disclosure Vulnerability |
|
CVE-2019-1102
CRITICAL · vendor
GDI+ Remote Code Execution Vulnerability |
|
CVE-2019-1097
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1096
HIGH · vendor
Win32k Information Disclosure Vulnerability |
|
CVE-2019-1095
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1094
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1093
HIGH · vendor
DirectWrite Information Disclosure Vulnerability |
|
CVE-2019-1091
HIGH · vendor
Microsoft unistore.dll Information Disclosure Vulnerability |
|
CVE-2019-1090
HIGH · vendor
Windows dnsrslvr.dll Elevation of Privilege Vulnerability |
|
CVE-2019-1089
HIGH · vendor
Windows RPCSS Elevation of Privilege Vulnerability |
|
CVE-2019-1088
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1087
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1086
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1085
HIGH · vendor
Windows WLAN Service Elevation of Privilege Vulnerability |
|
CVE-2019-1082
HIGH · vendor
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1074
HIGH · vendor
Microsoft Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1073
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1071
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1067
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2019-1037
HIGH · vendor
Windows Error Reporting Elevation of Privilege Vulnerability |
|
CVE-2019-1006
HIGH · vendor
WCF/WIF SAML Token Authentication Bypass Vulnerability |
|
CVE-2019-0999
HIGH · vendor
DirectX Elevation of Privilege Vulnerability |
|
CVE-2019-0975
HIGH · vendor
ADFS Security Feature Bypass Vulnerability |
|
CVE-2019-0966
HIGH · vendor
Windows Hyper-V Denial of Service Vulnerability |
|
CVE-2019-0887
HIGH · vendor
Remote Desktop Services Remote Code Execution Vulnerability |
|
CVE-2019-0880
Microsoft splwow64 Elevation of Privilege Vulnerability |
|
CVE-2019-0865
HIGH · vendor
SymCrypt Denial of Service Vulnerability |
|
CVE-2019-0811
HIGH · vendor
Windows DNS Server Denial of Service Vulnerability |
|
CVE-2019-0785
CRITICAL · vendor
Windows DHCP Server Remote Code Execution Vulnerability |
|
CVE-2019-13450
MEDIUM 6.5
In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active.… |
|
CVE-2019-13449
MEDIUM 6.5
In the Zoom Client before 4.4.2 on macOS, remote attackers can cause a denial of service (continual focus grabs) via a sequence of invalid launch?action=join&c… |
|
CVE-2019-13404
HIGH 7.8
The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code… |
|
CVE-2019-13118
MEDIUM 5.3
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination coul… |
|
CVE-2019-2346
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2334
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2330
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2328
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2327
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2326
HIGH · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2322
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2019-2308
CRITICAL · vendor
Indexed via Android Security Bulletin; full NVD metadata pending. |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.