Vulnerabilities
Tracked app vulnerabilities
29,110 CVEs affect a tracked app or OS (all severities, all platforms). 375 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 29,110
- Actively exploited
- 375
- Publication window
- 1997-01-01 → 2026-11-04
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2019-12874
CRITICAL 9.8
An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while pars… |
|
CVE-2018-6349
CRITICAL 9.8
When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affe… |
|
CVE-2018-6339
CRITICAL 9.8
When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. An off-by-one error meant… |
|
CVE-2018-20655
CRITICAL 9.8
When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects … |
|
CVE-2019-5439
MEDIUM 6.5
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit. |
|
CVE-2019-1081
MEDIUM 4.2
An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited thi… |
|
CVE-2019-1069
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited … |
|
CVE-2019-1054
MEDIUM 5.0
A security feature bypass vulnerability exists in Edge that allows for bypassing Mark of the Web Tagging (MOTW). Failing to set the MOTW means that a large num… |
|
CVE-2019-1052
MEDIUM 4.2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-1051
MEDIUM 4.2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-1038
HIGH 7.5
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that … |
|
CVE-2019-1034
HIGH 7.8
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploi… |
|
CVE-2019-1024
MEDIUM 4.2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-1023
MEDIUM 6.5
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge. An attacker who successf… |
|
CVE-2019-1003
MEDIUM 4.2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-1002
MEDIUM 4.2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-0993
MEDIUM 4.2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-0992
MEDIUM 4.2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-0991
MEDIUM 4.2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-0990
MEDIUM 6.5
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-0989
MEDIUM 4.2
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerab… |
|
CVE-2019-1065
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2019-1064
Windows Elevation of Privilege Vulnerability |
|
CVE-2019-1053
HIGH · vendor
Windows Shell Elevation of Privilege Vulnerability |
|
CVE-2019-1050
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1046
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1045
HIGH · vendor
Windows Network File System Elevation of Privilege Vulnerability |
|
CVE-2019-1044
HIGH · vendor
Windows Secure Kernel Mode Security Feature Bypass Vulnerability |
|
CVE-2019-1043
HIGH · vendor
Comctl32 Remote Code Execution Vulnerability |
|
CVE-2019-1041
HIGH · vendor
Windows Kernel Elevation of Privilege Vulnerability |
|
CVE-2019-1040
HIGH · vendor
Windows NTLM Tampering Vulnerability |
|
CVE-2019-1039
HIGH · vendor
Windows Kernel Information Disclosure Vulnerability |
|
CVE-2019-1028
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1027
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1026
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1025
HIGH · vendor
Windows Denial of Service Vulnerability |
|
CVE-2019-1022
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1021
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-1019
HIGH · vendor
Microsoft Windows Security Feature Bypass Vulnerability |
|
CVE-2019-1018
HIGH · vendor
DirectX Elevation of Privilege Vulnerability |
|
CVE-2019-1017
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1014
HIGH · vendor
Win32k Elevation of Privilege Vulnerability |
|
CVE-2019-1012
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1010
HIGH · vendor
Windows GDI Information Disclosure Vulnerability |
|
CVE-2019-1007
HIGH · vendor
Windows Audio Service Elevation of Privilege Vulnerability |
|
CVE-2019-0998
HIGH · vendor
Windows Storage Service Elevation of Privilege Vulnerability |
|
CVE-2019-0986
HIGH · vendor
Windows User Profile Service Elevation of Privilege Vulnerability |
|
CVE-2019-0984
HIGH · vendor
Windows Common Log File System Driver Elevation of Privilege Vulnerability |
|
CVE-2019-0983
HIGH · vendor
Windows Storage Service Elevation of Privilege Vulnerability |
|
CVE-2019-0974
HIGH · vendor
Jet Database Engine Remote Code Execution Vulnerability |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.